Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-29063 (GCVE-0-2026-29063)
Vulnerability from cvelistv5 – Published: 2026-03-06 18:25 – Updated: 2026-08-10 12:05
VLAI
EPSS
VEX
Title
Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable
Summary
Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject() APIs. This issue has been patched in versions 3.8.3, 4.3.7, and 5.1.5.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
Assigner
References
72 references
Impacted products
156 products
| Vendor | Product | Version | |
|---|---|---|---|
| immutable-js | immutable-js |
Affected:
< 3.8.3
Affected: < 4.3.7 Affected: < 5.1.5 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782839279 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782840539 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782839996 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Migration Toolkit for Virtualization 2.1 |
Unaffected:
1779139872 , < *
(rpm)
cpe:/a:redhat:migration_toolkit_virtualization:2.10::el9 |
|
| Red Hat | Migration Toolkit for Virtualization 2.9 |
Unaffected:
1778927462 , < *
(rpm)
cpe:/a:redhat:migration_toolkit_virtualization:2.9::el9 |
|
| Red Hat | multicluster engine for Kubernetes 2.1 |
Unaffected:
1777128790 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.10::el9 |
|
| Red Hat | multicluster engine for Kubernetes 2.11.0 |
Unaffected:
1777559392 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
|
| Red Hat | multicluster engine for Kubernetes 2.6 |
Unaffected:
1776223790 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.6::el9 |
|
| Red Hat | multicluster engine for Kubernetes 2.7 |
Unaffected:
1777306226 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.7::el9 |
|
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1775116156 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
|
| Red Hat | multicluster engine for Kubernetes 2.9.0 |
Unaffected:
1777301444 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.9::el9 |
|
| Red Hat | Network Observability (NETOBSERV) 1.11.2 |
Unaffected:
1774431617 , < *
(rpm)
cpe:/a:redhat:network_observ_optr:1.11::el9 |
|
| Red Hat | Network Observability (NETOBSERV) 1.12.0 |
Unaffected:
1780920979 , < *
(rpm)
cpe:/a:redhat:network_observ_optr:1.12::el9 |
|
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.14 |
Unaffected:
1783451729 , < *
(rpm)
cpe:/a:redhat:acm:2.14::el9 |
|
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.15 |
Unaffected:
1776927126 , < *
(rpm)
cpe:/a:redhat:acm:2.15::el9 |
|
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.16 |
Unaffected:
1777559387 , < *
(rpm)
cpe:/a:redhat:acm:2.16::el9 |
|
| Red Hat | Red Hat Advanced Cluster Security 4.8 |
Unaffected:
1777307791 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.8::el8 |
|
| Red Hat | Red Hat Advanced Cluster Security 4.9 |
Unaffected:
1777986630 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.9::el8 |
|
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.10 |
Unaffected:
1777976489 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.10::el8 |
|
| Red Hat | Red Hat Developer Hub 1.8 |
Unaffected:
1776784286 , < *
(rpm)
cpe:/a:redhat:rhdh:1.8::el9 |
|
| Red Hat | Red Hat Developer Hub 1.9 |
Unaffected:
1777903262 , < *
(rpm)
cpe:/a:redhat:rhdh:1.9::el9 |
|
| Red Hat | Red Hat Discovery 2 |
Unaffected:
1775675922 , < *
(rpm)
cpe:/a:redhat:discovery:2::el9 |
|
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502765 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
|
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502438 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194938 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194574 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784126822 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784127736 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
|
| Red Hat | Red Hat Migration Toolkit 1.8 |
Unaffected:
1783690532 , < *
(rpm)
cpe:/a:redhat:rhmt:1.8::el8 |
|
| Red Hat | Red Hat OpenShift AI 2.25 |
Unaffected:
1780467029 , < *
(rpm)
cpe:/a:redhat:openshift_ai:2.25::el9 |
|
| Red Hat | Red Hat OpenShift AI 2.25 |
Unaffected:
1780467147 , < *
(rpm)
cpe:/a:redhat:openshift_ai:2.25::el9 |
|
| Red Hat | Red Hat OpenShift AI 3.3 |
Unaffected:
1779189627 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.3::el9 |
|
| Red Hat | Red Hat OpenShift AI 3.3 |
Unaffected:
1778473763 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.3::el9 |
|
| Red Hat | Red Hat OpenShift AI 3.3 |
Unaffected:
1778666987 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.3::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.12 |
Unaffected:
1782276534 , < *
(rpm)
cpe:/a:redhat:openshift:4.12::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.13 |
Unaffected:
1784055834 , < *
(rpm)
cpe:/a:redhat:openshift:4.13::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.14 |
Unaffected:
1782157414 , < *
(rpm)
cpe:/a:redhat:openshift:4.14::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.15 |
Unaffected:
1782127091 , < *
(rpm)
cpe:/a:redhat:openshift:4.15::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.16 |
Unaffected:
1779262817 , < *
(rpm)
cpe:/a:redhat:openshift:4.16::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.16 |
Unaffected:
1778615276 , < *
(rpm)
cpe:/a:redhat:openshift:4.16::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.16 |
Unaffected:
1783306715 , < *
(rpm)
cpe:/a:redhat:openshift:4.16::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.17 |
Unaffected:
1778517109 , < *
(rpm)
cpe:/a:redhat:openshift:4.17::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.17 |
Unaffected:
1782240573 , < *
(rpm)
cpe:/a:redhat:openshift:4.17::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.17 |
Unaffected:
1782240332 , < *
(rpm)
cpe:/a:redhat:openshift:4.17::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.17 |
Unaffected:
1782269794 , < *
(rpm)
cpe:/a:redhat:openshift:4.17::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.18 |
Unaffected:
1777459211 , < *
(rpm)
cpe:/a:redhat:openshift:4.18::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.18 |
Unaffected:
1779874891 , < *
(rpm)
cpe:/a:redhat:openshift:4.18::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.18 |
Unaffected:
1779874967 , < *
(rpm)
cpe:/a:redhat:openshift:4.18::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.18 |
Unaffected:
1782259588 , < *
(rpm)
cpe:/a:redhat:openshift:4.18::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
1779256322 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
1779249920 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
1780503846 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
1782171676 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.2 |
Unaffected:
1778645008 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.2 |
Unaffected:
1779863939 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.2 |
Unaffected:
1781688743 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1779266006 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1783676191 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1783929816 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1784094353 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1784093953 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1784094943 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1783676585 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1783676649 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1783676675 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1784094299 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1784094725 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1783676820 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1783676883 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1783676894 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1784095175 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1783676977 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1784093503 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1783677297 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1783677345 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1783677533 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1783684360 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1783684068 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1784054582 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1784054606 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1784055295 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1783684603 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1783684668 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1783684667 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1784054873 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1783684707 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1784055589 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1783684779 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1783684831 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1783684839 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1784055533 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1784055558 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1784056134 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1783685128 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1783685129 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1783685375 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783667125 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783666755 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1784054598 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1784055387 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1784055726 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783667517 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783667577 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783667611 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1784055020 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783667641 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1784055586 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783667790 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783667859 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783667875 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783667869 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783667877 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1784055576 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1784055244 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1784055382 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783668266 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783668288 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783669219 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat OpenShift Pipelines 1.2 |
Unaffected:
1779910201 , < *
(rpm)
cpe:/a:redhat:openshift_pipelines:1.20::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 2.6 |
Unaffected:
1776202125 , < *
(rpm)
cpe:/a:redhat:service_mesh:2.6::el8 |
|
| Red Hat | Red Hat OpenShift Service Mesh 2.6 |
Unaffected:
1776191302 , < *
(rpm)
cpe:/a:redhat:service_mesh:2.6::el8 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1776151124 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1776151272 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1776151106 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1776151270 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1776155669 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1776149682 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1776151134 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1776151277 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
|
| Red Hat | Red Hat Quay 3.1 |
Unaffected:
1776736910 , < *
(rpm)
cpe:/a:redhat:quay:3.10::el8 |
|
| Red Hat | Red Hat Quay 3.12 |
Unaffected:
1775253092 , < *
(rpm)
cpe:/a:redhat:quay:3.12::el8 |
|
| Red Hat | Red Hat Quay 3.15 |
Unaffected:
1775169219 , < *
(rpm)
cpe:/a:redhat:quay:3.15::el8 |
|
| Red Hat | Red Hat Quay 3.16 |
Unaffected:
1779204086 , < *
(rpm)
cpe:/a:redhat:quay:3.16::el9 |
|
| Red Hat | Red Hat Quay 3.17 |
Unaffected:
1779922205 , < *
(rpm)
cpe:/a:redhat:quay:3.17::el9 |
|
| Red Hat | Red Hat Quay 3.9 |
Unaffected:
1775169218 , < *
(rpm)
cpe:/a:redhat:quay:3.9::el8 |
|
| Red Hat | Red Hat Satellite 6.18 |
Unaffected:
1781032495 , < *
(rpm)
cpe:/a:redhat:satellite:6.18::el9 |
|
| Red Hat | Red Hat Satellite 6.18 |
Unaffected:
1780105179 , < *
(rpm)
cpe:/a:redhat:satellite:6.18::el9 |
|
| Red Hat | Logging Subsystem for Red Hat OpenShift |
cpe:/a:redhat:logging:5 |
|
| Red Hat | Node HealthCheck Operator |
cpe:/a:redhat:workload_availability_nhc:0 |
|
| Red Hat | OpenShift Lightspeed |
cpe:/a:redhat:openshift_lightspeed |
|
| Red Hat | OpenShift Pipelines |
cpe:/a:redhat:openshift_pipelines:1 |
|
| Red Hat | OpenShift Service Mesh 3 |
cpe:/a:redhat:service_mesh:3 |
|
| Red Hat | Red Hat 3scale API Management Platform 2 |
cpe:/a:redhat:red_hat_3scale_amp:2 |
|
| Red Hat | Red Hat Ansible Automation Platform 2 |
cpe:/a:redhat:ansible_automation_platform:2 |
|
| Red Hat | Red Hat build of Apicurio Registry 2 |
cpe:/a:redhat:service_registry:2 |
|
| Red Hat | Red Hat Connectivity Link 1 |
cpe:/a:redhat:connectivity_link:1 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
cpe:/o:redhat:enterprise_linux:10 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
cpe:/o:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
cpe:/o:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat OpenShift AI (RHOAI) |
cpe:/a:redhat:openshift_ai |
|
| Red Hat | Red Hat OpenShift Container Platform 4 |
cpe:/a:redhat:openshift:4 |
|
| Red Hat | Red Hat OpenShift GitOps |
cpe:/a:redhat:openshift_gitops:1 |
|
| Red Hat | Red Hat OpenShift Virtualization 4 |
cpe:/a:redhat:container_native_virtualization:4 |
|
| Red Hat | Red Hat Satellite 6 |
cpe:/a:redhat:satellite:6 |
|
| Red Hat | Self-service automation portal 2 |
cpe:/a:redhat:ansible_portal:2 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-29063",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-03-06T19:32:37.694711Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-03-06T19:33:31.642Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/logging-console-plugin-pf4-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782839279",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/logging-console-plugin-pf5-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782840539",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782839996",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:migration_toolkit_virtualization:2.10::el9"
],
"defaultStatus": "affected",
"packageName": "migration-toolkit-virtualization/mtv-console-plugin-rhel9",
"product": "Migration Toolkit for Virtualization 2.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779139872",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:migration_toolkit_virtualization:2.9::el9"
],
"defaultStatus": "affected",
"packageName": "migration-toolkit-virtualization/mtv-console-plugin-rhel9",
"product": "Migration Toolkit for Virtualization 2.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778927462",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.10::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/console-mce-rhel9",
"product": "multicluster engine for Kubernetes 2.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777128790",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/console-mce-rhel9",
"product": "multicluster engine for Kubernetes 2.11.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777559392",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/console-mce-rhel9",
"product": "multicluster engine for Kubernetes 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776223790",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.7::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/console-mce-rhel9",
"product": "multicluster engine for Kubernetes 2.7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777306226",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/console-mce-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1775116156",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.9::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/console-mce-rhel9",
"product": "multicluster engine for Kubernetes 2.9.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777301444",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:network_observ_optr:1.11::el9"
],
"defaultStatus": "affected",
"packageName": "network-observability/network-observability-console-plugin-rhel9",
"product": "Network Observability (NETOBSERV) 1.11.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1774431617",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:network_observ_optr:1.12::el9"
],
"defaultStatus": "affected",
"packageName": "network-observability/network-observability-console-plugin-pf4-rhel9",
"product": "Network Observability (NETOBSERV) 1.12.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780920979",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.14::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/console-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783451729",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.15::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/console-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776927126",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.16::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/console-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777559387",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.8::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security 4.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777307791",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.9::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security 4.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777986630",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.10::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777976489",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhdh:1.8::el9"
],
"defaultStatus": "affected",
"packageName": "rhdh/rhdh-hub-rhel9",
"product": "Red Hat Developer Hub 1.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776784286",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhdh:1.9::el9"
],
"defaultStatus": "affected",
"packageName": "rhdh/rhdh-hub-rhel9",
"product": "Red Hat Developer Hub 1.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777903262",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:discovery:2::el9"
],
"defaultStatus": "affected",
"packageName": "discovery/discovery-ui-rhel9",
"product": "Red Hat Discovery 2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1775675922",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-ocp-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502765",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502438",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-ocp-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194938",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194574",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-ocp-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784126822",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784127736",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhmt:1.8::el8"
],
"defaultStatus": "affected",
"packageName": "rhmtc/openshift-migration-ui-rhel8",
"product": "Red Hat Migration Toolkit 1.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783690532",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:2.25::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-dashboard-rhel9",
"product": "Red Hat OpenShift AI 2.25",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780467029",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:2.25::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
"product": "Red Hat OpenShift AI 2.25",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780467147",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-dashboard-rhel9",
"product": "Red Hat OpenShift AI 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779189627",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
"product": "Red Hat OpenShift AI 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778473763",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
"product": "Red Hat OpenShift AI 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778666987",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.12::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-console",
"product": "Red Hat OpenShift Container Platform 4.12",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782276534",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.13::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-console",
"product": "Red Hat OpenShift Container Platform 4.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055834",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.14::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-console",
"product": "Red Hat OpenShift Container Platform 4.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782157414",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.15::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-console",
"product": "Red Hat OpenShift Container Platform 4.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782127091",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.16::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-monitoring-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779262817",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.16::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-networking-console-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778615276",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.16::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-console-rhel9",
"product": "Red Hat OpenShift Container Platform 4.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783306715",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-networking-console-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778517109",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-console-rhel9",
"product": "Red Hat OpenShift Container Platform 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782240573",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-monitoring-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782240332",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/nmstate-console-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782269794",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-networking-console-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777459211",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-monitoring-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779874891",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/nmstate-console-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779874967",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-console-rhel9",
"product": "Red Hat OpenShift Container Platform 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782259588",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-networking-console-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779256322",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/nmstate-console-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779249920",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-monitoring-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780503846",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-console-rhel9",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782171676",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/nmstate-console-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778645008",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-monitoring-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779863939",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-console-rhel9",
"product": "Red Hat OpenShift Container Platform 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781688743",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-monitoring-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779266006",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676191",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783929816",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-core-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784094353",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784093953",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784094943",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676585",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-metrics-exporter-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676649",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676675",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cli-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784094299",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784094725",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cosi-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676820",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676883",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676894",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784095175",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676977",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-must-gather-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784093503",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783677297",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783677345",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/rook-ceph-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783677533",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684360",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684068",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-core-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784054582",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784054606",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055295",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684603",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-metrics-exporter-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684668",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684667",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cli-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784054873",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684707",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055589",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cosi-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684779",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684831",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684839",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055533",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055558",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-must-gather-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784056134",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783685128",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783685129",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/rook-ceph-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783685375",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667125",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783666755",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-core-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784054598",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055387",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055726",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667517",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-metrics-exporter-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667577",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667611",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cli-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055020",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667641",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055586",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cosi-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667790",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667859",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667875",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-external-snapshotter-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667869",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667877",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055576",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055244",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-must-gather-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055382",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783668266",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783668288",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/rook-ceph-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783669219",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-console-plugin-rhel9",
"product": "Red Hat OpenShift Pipelines 1.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779910201",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:2.6::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel8",
"product": "Red Hat OpenShift Service Mesh 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776202125",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:2.6::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel8",
"product": "Red Hat OpenShift Service Mesh 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776191302",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776151124",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776151272",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776151106",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776151270",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776155669",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776149682",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776151134",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776151277",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.10::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776736910",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.12::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.12",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1775253092",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.15::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1775169219",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.16::el9"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel9",
"product": "Red Hat Quay 3.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779204086",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.17::el9"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel9",
"product": "Red Hat Quay 3.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779922205",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.9::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1775169218",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:satellite:6.18::el9"
],
"defaultStatus": "affected",
"packageName": "satellite/iop-vulnerability-frontend-rhel9",
"product": "Red Hat Satellite 6.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781032495",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:satellite:6.18::el9"
],
"defaultStatus": "affected",
"packageName": "satellite/iop-host-inventory-frontend-rhel9",
"product": "Red Hat Satellite 6.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780105179",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:5"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/logging-view-plugin-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "unaffected",
"packageName": "workload-availability/node-healthcheck-must-gather-rhel9",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "unaffected",
"packageName": "workload-availability/node-healthcheck-operator-bundle",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "unaffected",
"packageName": "workload-availability/node-healthcheck-rhel9-operator",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "workload-availability/node-remediation-console-rhel8",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "workload-availability/node-remediation-console-rhel9",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "affected",
"packageName": "openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "affected",
"packageName": "openshift-lightspeed/lightspeed-console-plugin-rhel9",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-console-plugin-rhel8",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/kiali-operator-bundle",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/kiali-rhel9-operator",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp20/system",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp21/system",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp22/system",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp24/system",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp25/system",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp26/system",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp2/system-rhel7",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp2/system-rhel8",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp2/system-rhel9",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform/automation-dashboard-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-tech-preview/automation-dashboard-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_registry:2"
],
"defaultStatus": "affected",
"packageName": "io.apicurio-apicurio-registry",
"product": "Red Hat build of Apicurio Registry 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:connectivity_link:1"
],
"defaultStatus": "affected",
"packageName": "rhcl-1/rhcl-console-plugin-rhel9",
"product": "Red Hat Connectivity Link 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "mozjs60",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "pcs",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "gjs",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-dashboard-rhel8",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel8",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-mlflow-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-maas-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-monitoring-plugin-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/argocd-rhel8",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/argocd-rhel9",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/console-plugin-rhel8",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "affected",
"packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "affected",
"packageName": "nodejs-connected-react-router",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "unaffected",
"packageName": "nodejs-sass",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_portal:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform/automation-portal",
"product": "Self-service automation portal 2",
"vendor": "Red Hat"
}
],
"datePublic": "2026-03-06T18:25:22.438Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS)."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-915",
"description": "Improperly Controlled Modification of Dynamically-Determined Object Attributes",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-10T12:05:44.812Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"name": "RHBZ#2445291",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-29063.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19409"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19410"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:6428"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24473"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36882"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13548"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13847"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11070"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11217"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13791"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13829"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9742"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13826"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:7329"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24977"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19712"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34049"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40022"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28893"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28964"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36621"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20088"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34100"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34099"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17598"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21658"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29857"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21657"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:12118"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20042"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29864"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23246"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20041"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17469"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27063"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21703"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20034"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21931"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8483"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8484"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8490"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8491"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8493"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:6720"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:6568"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22465"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11916"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:6926"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26232"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26225"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13853"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13542"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9848"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11858"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8218"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11414"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:34342: Cluster Observability Operator 1.5.0"
},
{
"lang": "en",
"value": "RHSA-2026:19409: Migration Toolkit for Virtualization 2.1"
},
{
"lang": "en",
"value": "RHSA-2026:19410: Migration Toolkit for Virtualization 2.9"
},
{
"lang": "en",
"value": "RHSA-2026:6428: Network Observability (NETOBSERV) 1.11.2"
},
{
"lang": "en",
"value": "RHSA-2026:24473: Network Observability (NETOBSERV) 1.12.0"
},
{
"lang": "en",
"value": "RHSA-2026:36882: Red Hat Advanced Cluster Management for Kubernetes 2.14"
},
{
"lang": "en",
"value": "RHSA-2026:13548: Red Hat Advanced Cluster Management for Kubernetes 2.15"
},
{
"lang": "en",
"value": "RHSA-2026:13847: Red Hat Advanced Cluster Management for Kubernetes 2.16"
},
{
"lang": "en",
"value": "RHSA-2026:11070: Red Hat Advanced Cluster Security 4.8"
},
{
"lang": "en",
"value": "RHSA-2026:11217: Red Hat Advanced Cluster Security 4.8"
},
{
"lang": "en",
"value": "RHSA-2026:13791: Red Hat Advanced Cluster Security 4.9"
},
{
"lang": "en",
"value": "RHSA-2026:13829: Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"lang": "en",
"value": "RHSA-2026:9742: Red Hat Developer Hub 1.8"
},
{
"lang": "en",
"value": "RHSA-2026:13826: Red Hat Developer Hub 1.9"
},
{
"lang": "en",
"value": "RHSA-2026:7329: Red Hat Discovery 2"
},
{
"lang": "en",
"value": "RHSA-2026:36651: Red Hat Edge Manager 1.0"
},
{
"lang": "en",
"value": "RHSA-2026:40945: Red Hat Edge Manager 1.1"
},
{
"lang": "en",
"value": "RHSA-2026:40118: Red Hat Edge Manager 1.1"
},
{
"lang": "en",
"value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
},
{
"lang": "en",
"value": "RHSA-2026:24977: Red Hat OpenShift AI 2.25"
},
{
"lang": "en",
"value": "RHSA-2026:19712: Red Hat OpenShift AI 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:34049: Red Hat OpenShift Container Platform 4.12"
},
{
"lang": "en",
"value": "RHSA-2026:40022: Red Hat OpenShift Container Platform 4.13"
},
{
"lang": "en",
"value": "RHSA-2026:28893: Red Hat OpenShift Container Platform 4.14"
},
{
"lang": "en",
"value": "RHSA-2026:28964: Red Hat OpenShift Container Platform 4.15"
},
{
"lang": "en",
"value": "RHSA-2026:36621: Red Hat OpenShift Container Platform 4.16"
},
{
"lang": "en",
"value": "RHSA-2026:20088: Red Hat OpenShift Container Platform 4.16"
},
{
"lang": "en",
"value": "RHSA-2026:34100: Red Hat OpenShift Container Platform 4.17"
},
{
"lang": "en",
"value": "RHSA-2026:34099: Red Hat OpenShift Container Platform 4.17"
},
{
"lang": "en",
"value": "RHSA-2026:17598: Red Hat OpenShift Container Platform 4.17"
},
{
"lang": "en",
"value": "RHSA-2026:21658: Red Hat OpenShift Container Platform 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:29857: Red Hat OpenShift Container Platform 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:21657: Red Hat OpenShift Container Platform 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:12118: Red Hat OpenShift Container Platform 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:20042: Red Hat OpenShift Container Platform 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:29864: Red Hat OpenShift Container Platform 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:23246: Red Hat OpenShift Container Platform 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:20041: Red Hat OpenShift Container Platform 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:17469: Red Hat OpenShift Container Platform 4.20"
},
{
"lang": "en",
"value": "RHSA-2026:27063: Red Hat OpenShift Container Platform 4.20"
},
{
"lang": "en",
"value": "RHSA-2026:21703: Red Hat OpenShift Container Platform 4.20"
},
{
"lang": "en",
"value": "RHSA-2026:20034: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:21931: Red Hat OpenShift Pipelines 1.2"
},
{
"lang": "en",
"value": "RHSA-2026:8483: Red Hat OpenShift Service Mesh 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:8484: Red Hat OpenShift Service Mesh 3.0"
},
{
"lang": "en",
"value": "RHSA-2026:8490: Red Hat OpenShift Service Mesh 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:8491: Red Hat OpenShift Service Mesh 3.2"
},
{
"lang": "en",
"value": "RHSA-2026:8493: Red Hat OpenShift Service Mesh 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:41941: Red Hat Openshift Data Foundation 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:41944: Red Hat Openshift Data Foundation 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:40984: Red Hat Openshift Data Foundation 4.2"
},
{
"lang": "en",
"value": "RHSA-2026:6720: Red Hat Quay 3.12"
},
{
"lang": "en",
"value": "RHSA-2026:6568: Red Hat Quay 3.15"
},
{
"lang": "en",
"value": "RHSA-2026:19375: Red Hat Quay 3.16"
},
{
"lang": "en",
"value": "RHSA-2026:22465: Red Hat Quay 3.17"
},
{
"lang": "en",
"value": "RHSA-2026:11916: Red Hat Quay 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:6926: Red Hat Quay 3.9"
},
{
"lang": "en",
"value": "RHSA-2026:26232: Red Hat Satellite 6.18"
},
{
"lang": "en",
"value": "RHSA-2026:26225: Red Hat Satellite 6.18"
},
{
"lang": "en",
"value": "RHSA-2026:13853: multicluster engine for Kubernetes 2.11.0"
},
{
"lang": "en",
"value": "RHSA-2026:13542: multicluster engine for Kubernetes 2.1"
},
{
"lang": "en",
"value": "RHSA-2026:9848: multicluster engine for Kubernetes 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:11858: multicluster engine for Kubernetes 2.7"
},
{
"lang": "en",
"value": "RHSA-2026:8218: multicluster engine for Kubernetes 2.8"
},
{
"lang": "en",
"value": "RHSA-2026:11414: multicluster engine for Kubernetes 2.9.0"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-03-06T19:00:57.982Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-03-06T18:25:22.438Z",
"value": "Made public."
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"product": "immutable-js",
"vendor": "immutable-js",
"versions": [
{
"status": "affected",
"version": "\u003c 3.8.3"
},
{
"status": "affected",
"version": "\u003c 4.3.7"
},
{
"status": "affected",
"version": "\u003c 5.1.5"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject() APIs. This issue has been patched in versions 3.8.3, 4.3.7, and 5.1.5."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"privilegesRequired": "NONE",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1321",
"description": "CWE-1321: Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-03-06T18:25:22.438Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
},
{
"name": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"name": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"name": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
}
],
"source": {
"advisory": "GHSA-wf6x-7x77-mvgw",
"discovery": "UNKNOWN"
},
"title": "Immutable.js: Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027) in immutable"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-29063",
"datePublished": "2026-03-06T18:25:22.438Z",
"dateReserved": "2026-03-03T20:51:43.481Z",
"dateUpdated": "2026-08-10T12:05:44.812Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-29063",
"date": "2026-08-10",
"epss": "0.00978",
"percentile": "0.58861"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-29063\",\"sourceIdentifier\":\"security-advisories@github.com\",\"published\":\"2026-03-06T19:16:21.557\",\"lastModified\":\"2026-08-10T13:18:38.737\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject() APIs. This issue has been patched in versions 3.8.3, 4.3.7, and 5.1.5.\"},{\"lang\":\"es\",\"value\":\"Immutable.js proporciona muchas estructuras de datos inmutables persistentes. Antes de las versiones 3.8.3, 4.3.7 y 5.1.5, la contaminaci\u00f3n de prototipos es posible en immutable a trav\u00e9s de las APIs mergeDeep(), mergeDeepWith(), merge(), Map.toJS() y Map.toObject(). Este problema ha sido parcheado en las versiones 3.8.3, 4.3.7 y 5.1.5.\"}],\"affected\":[{\"source\":\"security-advisories@github.com\",\"affectedData\":[{\"vendor\":\"immutable-js\",\"product\":\"immutable-js\",\"versions\":[{\"version\":\"\u003c 3.8.3\",\"status\":\"affected\"},{\"version\":\"\u003c 4.3.7\",\"status\":\"affected\"},{\"version\":\"\u003c 5.1.5\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/logging-console-plugin-pf4-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782839279\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/logging-console-plugin-pf5-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782840539\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782839996\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Virtualization 2.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"migration-toolkit-virtualization/mtv-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_virtualization:2.10::el9\"],\"versions\":[{\"version\":\"1779139872\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Virtualization 2.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"migration-toolkit-virtualization/mtv-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_virtualization:2.9::el9\"],\"versions\":[{\"version\":\"1778927462\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/console-mce-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.10::el9\"],\"versions\":[{\"version\":\"1777128790\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/console-mce-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1777559392\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/console-mce-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.6::el9\"],\"versions\":[{\"version\":\"1776223790\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/console-mce-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.7::el9\"],\"versions\":[{\"version\":\"1777306226\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/console-mce-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1775116156\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.9.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/console-mce-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.9::el9\"],\"versions\":[{\"version\":\"1777301444\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Network Observability (NETOBSERV) 1.11.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"network-observability/network-observability-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:network_observ_optr:1.11::el9\"],\"versions\":[{\"version\":\"1774431617\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Network Observability (NETOBSERV) 1.12.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"network-observability/network-observability-console-plugin-pf4-rhel9\",\"cpes\":[\"cpe:/a:redhat:network_observ_optr:1.12::el9\"],\"versions\":[{\"version\":\"1780920979\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/console-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.14::el9\"],\"versions\":[{\"version\":\"1783451729\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/console-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.15::el9\"],\"versions\":[{\"version\":\"1776927126\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/console-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.16::el9\"],\"versions\":[{\"version\":\"1777559387\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.8::el8\"],\"versions\":[{\"version\":\"1777307791\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"],\"versions\":[{\"version\":\"1777986630\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"],\"versions\":[{\"version\":\"1777976489\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Developer Hub 1.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhdh/rhdh-hub-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhdh:1.8::el9\"],\"versions\":[{\"version\":\"1776784286\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Developer Hub 1.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhdh/rhdh-hub-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhdh:1.9::el9\"],\"versions\":[{\"version\":\"1777903262\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Discovery 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"discovery/discovery-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:discovery:2::el9\"],\"versions\":[{\"version\":\"1775675922\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-ui-ocp-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502765\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502438\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-ui-ocp-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194938\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-ui-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194574\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-ui-ocp-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784126822\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784127736\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Migration Toolkit 1.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhmtc/openshift-migration-ui-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhmt:1.8::el8\"],\"versions\":[{\"version\":\"1783690532\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 2.25\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-dashboard-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:2.25::el9\"],\"versions\":[{\"version\":\"1780467029\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 2.25\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-mod-arch-model-registry-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:2.25::el9\"],\"versions\":[{\"version\":\"1780467147\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-dashboard-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.3::el9\"],\"versions\":[{\"version\":\"1779189627\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-mod-arch-gen-ai-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.3::el9\"],\"versions\":[{\"version\":\"1778473763\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-mod-arch-model-registry-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.3::el9\"],\"versions\":[{\"version\":\"1778666987\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.12\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-console\",\"cpes\":[\"cpe:/a:redhat:openshift:4.12::el9\"],\"versions\":[{\"version\":\"1782276534\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-console\",\"cpes\":[\"cpe:/a:redhat:openshift:4.13::el9\"],\"versions\":[{\"version\":\"1784055834\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-console\",\"cpes\":[\"cpe:/a:redhat:openshift:4.14::el9\"],\"versions\":[{\"version\":\"1782157414\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-console\",\"cpes\":[\"cpe:/a:redhat:openshift:4.15::el9\"],\"versions\":[{\"version\":\"1782127091\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-monitoring-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.16::el9\"],\"versions\":[{\"version\":\"1779262817\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-networking-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.16::el9\"],\"versions\":[{\"version\":\"1778615276\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.16::el9\"],\"versions\":[{\"version\":\"1783306715\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-networking-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.17::el9\"],\"versions\":[{\"version\":\"1778517109\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.17::el9\"],\"versions\":[{\"version\":\"1782240573\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-monitoring-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.17::el9\"],\"versions\":[{\"version\":\"1782240332\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/nmstate-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.17::el9\"],\"versions\":[{\"version\":\"1782269794\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-networking-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.18::el9\"],\"versions\":[{\"version\":\"1777459211\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-monitoring-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.18::el9\"],\"versions\":[{\"version\":\"1779874891\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/nmstate-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.18::el9\"],\"versions\":[{\"version\":\"1779874967\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.18::el9\"],\"versions\":[{\"version\":\"1782259588\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-networking-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el9\"],\"versions\":[{\"version\":\"1779256322\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/nmstate-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el9\"],\"versions\":[{\"version\":\"1779249920\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-monitoring-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el9\"],\"versions\":[{\"version\":\"1780503846\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el9\"],\"versions\":[{\"version\":\"1782171676\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/nmstate-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1778645008\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-monitoring-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1779863939\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1781688743\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-monitoring-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1779266006\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1783676191\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1783929816\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1784094353\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1784093953\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1784094943\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1783676585\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-metrics-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1783676649\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1783676675\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1784094299\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1784094725\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cosi-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1783676820\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1783676883\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1783676894\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1784095175\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1783676977\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1784093503\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1783677297\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1783677345\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/rook-ceph-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1783677533\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1783684360\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1783684068\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1784054582\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1784054606\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1784055295\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1783684603\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-metrics-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1783684668\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1783684667\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1784054873\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cloudnative-pg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1783684707\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1784055589\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cosi-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1783684779\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1783684831\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1783684839\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1784055533\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1784055558\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1784056134\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1783685128\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1783685129\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/rook-ceph-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1783685375\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783667125\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783666755\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1784054598\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1784055387\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1784055726\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783667517\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-metrics-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783667577\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783667611\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1784055020\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cloudnative-pg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783667641\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1784055586\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cosi-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783667790\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783667859\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783667875\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-external-snapshotter-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783667869\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-external-snapshotter-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783667877\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1784055576\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1784055244\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1784055382\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783668266\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783668288\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/rook-ceph-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783669219\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Pipelines 1.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-pipelines/pipelines-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1.20::el9\"],\"versions\":[{\"version\":\"1779910201\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-ossmc-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2.6::el8\"],\"versions\":[{\"version\":\"1776202125\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2.6::el8\"],\"versions\":[{\"version\":\"1776191302\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-ossmc-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1776151124\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1776151272\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-ossmc-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1776151106\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1776151270\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-ossmc-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1776155669\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1776149682\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-ossmc-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1776151134\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1776151277\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.10::el8\"],\"versions\":[{\"version\":\"1776736910\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.12\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.12::el8\"],\"versions\":[{\"version\":\"1775253092\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.15::el8\"],\"versions\":[{\"version\":\"1775169219\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel9\",\"cpes\":[\"cpe:/a:redhat:quay:3.16::el9\"],\"versions\":[{\"version\":\"1779204086\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel9\",\"cpes\":[\"cpe:/a:redhat:quay:3.17::el9\"],\"versions\":[{\"version\":\"1779922205\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.9::el8\"],\"versions\":[{\"version\":\"1775169218\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"satellite/iop-vulnerability-frontend-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6.18::el9\"],\"versions\":[{\"version\":\"1781032495\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"satellite/iop-host-inventory-frontend-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6.18::el9\"],\"versions\":[{\"version\":\"1780105179\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/logging-view-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/node-healthcheck-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/node-healthcheck-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/node-healthcheck-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/node-remediation-console-rhel8\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/node-remediation-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-lightspeed/lightspeed-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-console-plugin-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/kiali-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp20/system\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp21/system\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp22/system\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp24/system\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp25/system\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp26/system\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp2/system-rhel7\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp2/system-rhel8\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp2/system-rhel9\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform/automation-dashboard-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-tech-preview/automation-dashboard-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apicurio Registry 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"io.apicurio-apicurio-registry\",\"cpes\":[\"cpe:/a:redhat:service_registry:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Connectivity Link 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcl-1/rhcl-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:connectivity_link:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"mozjs60\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"pcs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gjs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-dashboard-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-data-science-pipelines-argo-argoexec-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mlflow-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-maas-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-monitoring-plugin-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/argocd-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/argocd-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/console-plugin-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/kubevirt-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nodejs-connected-react-router\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nodejs-sass\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Self-service automation portal 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform/automation-portal\",\"cpes\":[\"cpe:/a:redhat:ansible_portal:2\"]}]}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\",\"baseScore\":8.7,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"NONE\",\"vulnAvailabilityImpact\":\"NONE\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"NOT_DEFINED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\"}}],\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-03-06T19:32:37.694711Z\",\"id\":\"CVE-2026-29063\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-1321\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-915\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:immutable-js:immutable:*:*:*:*:*:node.js:*:*\",\"versionStartIncluding\":\"3.0.0\",\"versionEndExcluding\":\"3.8.3\",\"matchCriteriaId\":\"22FDF10C-08DC-4178-9F7C-D580C292885A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:immutable-js:immutable:*:*:*:*:*:node.js:*:*\",\"versionStartIncluding\":\"4.0.0\",\"versionEndExcluding\":\"4.3.7\",\"matchCriteriaId\":\"A0F2EC71-7029-4F13-B383-6018587EE882\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:immutable-js:immutable:*:*:*:*:*:node.js:*:*\",\"versionStartIncluding\":\"5.0.0\",\"versionEndExcluding\":\"5.1.5\",\"matchCriteriaId\":\"17E6FB8C-0F81-4EA4-B197-C08AB22253C3\"}]}]}],\"references\":[{\"url\":\"https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Exploit\",\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11070\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11217\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11414\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11858\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11916\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:12118\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13542\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13548\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13791\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13826\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13829\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13847\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13853\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17469\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17598\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19375\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19409\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19410\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19712\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20034\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20041\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20042\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20088\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21657\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21658\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21703\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21931\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22465\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23246\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24473\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24977\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26225\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26232\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:27063\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28893\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28964\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29857\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29864\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34049\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34099\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34100\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34342\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36621\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36651\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36882\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40022\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40118\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40945\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40984\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41928\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41941\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41944\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:6428\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:6568\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:6720\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:6926\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7329\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8218\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8483\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8484\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8490\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8491\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8493\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9742\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9848\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-29063\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2445291\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-29063.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-08-10T06:35:02+00:00",
"cve": "CVE-2026-29063",
"id": "CVE-2026-29063",
"initial_release_date": "2026-03-06T18:25:22.438000+00:00",
"product_status:fixed": "498",
"product_status:known_affected": "34",
"product_status:known_not_affected": "12737",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-29063.json",
"version": "3"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 8.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782839279\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/logging-console-plugin-pf4-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782840539\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/logging-console-plugin-pf5-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782839996\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:migration_toolkit_virtualization:2.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Virtualization 2.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779139872\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"migration-toolkit-virtualization/mtv-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:migration_toolkit_virtualization:2.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Virtualization 2.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778927462\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"migration-toolkit-virtualization/mtv-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777128790\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/console-mce-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777559392\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/console-mce-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776223790\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/console-mce-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777306226\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/console-mce-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1775116156\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/console-mce-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.9.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777301444\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/console-mce-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:network_observ_optr:1.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Network Observability (NETOBSERV) 1.11.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1774431617\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"network-observability/network-observability-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:network_observ_optr:1.12::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Network Observability (NETOBSERV) 1.12.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780920979\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"network-observability/network-observability-console-plugin-pf4-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783451729\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.15::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776927126\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777559387\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.8::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777307791\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777986630\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777976489\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhdh:1.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Developer Hub 1.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776784286\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhdh/rhdh-hub-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhdh:1.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Developer Hub 1.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777903262\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhdh/rhdh-hub-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:discovery:2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Discovery 2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1775675922\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"discovery/discovery-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502765\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-ui-ocp-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502438\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194938\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-ui-ocp-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194574\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-ui-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784126822\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-ui-ocp-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784127736\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhmt:1.8::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Migration Toolkit 1.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783690532\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhmtc/openshift-migration-ui-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:2.25::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 2.25\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780467029\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-dashboard-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:2.25::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 2.25\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780467147\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-mod-arch-model-registry-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779189627\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-dashboard-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778473763\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-mod-arch-gen-ai-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778666987\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-mod-arch-model-registry-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.12::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.12\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782276534\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-console\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784055834\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-console\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782157414\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-console\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.15::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782127091\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-console\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779262817\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-monitoring-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778615276\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-networking-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783306715\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778517109\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-networking-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782240573\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782240332\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-monitoring-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782269794\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/nmstate-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777459211\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-networking-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779874891\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-monitoring-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779874967\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/nmstate-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782259588\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779256322\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-networking-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779249920\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/nmstate-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780503846\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-monitoring-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782171676\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778645008\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/nmstate-console-plugin-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779863939\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-monitoring-plugin-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781688743\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-console-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779266006\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-monitoring-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783676191\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783929816\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784094353\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-core-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784093953\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784094943\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783676585\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783676649\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-metrics-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783676675\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784094299\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784094725\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783676820\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cosi-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783676883\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783676894\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784095175\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783676977\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784093503\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-must-gather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783677297\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783677345\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783677533\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/rook-ceph-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783684360\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783684068\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784054582\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-core-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784054606\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784055295\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783684603\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783684668\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-metrics-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783684667\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784054873\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783684707\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cloudnative-pg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784055589\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783684779\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cosi-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783684831\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783684839\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784055533\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784055558\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784056134\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-must-gather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783685128\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783685129\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783685375\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/rook-ceph-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783667125\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783666755\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784054598\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-core-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784055387\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784055726\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783667517\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783667577\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-metrics-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783667611\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784055020\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783667641\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cloudnative-pg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784055586\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783667790\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cosi-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783667859\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783667875\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783667869\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-external-snapshotter-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783667877\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-external-snapshotter-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784055576\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784055244\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784055382\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-must-gather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783668266\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783668288\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783669219\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/rook-ceph-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Pipelines 1.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779910201\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-pipelines/pipelines-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776202125\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-ossmc-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776191302\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776151124\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-ossmc-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776151272\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776151106\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-ossmc-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776151270\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776155669\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-ossmc-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776149682\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776151134\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-ossmc-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776151277\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776736910\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.12::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.12\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1775253092\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.15::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1775169219\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779204086\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779922205\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1775169218\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781032495\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"satellite/iop-vulnerability-frontend-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780105179\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"satellite/iop-host-inventory-frontend-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:5\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/logging-view-plugin-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"workload-availability/node-healthcheck-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"workload-availability/node-healthcheck-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"workload-availability/node-healthcheck-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"workload-availability/node-remediation-console-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"workload-availability/node-remediation-console-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Lightspeed\", \"packageName\": \"openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Lightspeed\", \"packageName\": \"openshift-lightspeed/lightspeed-console-plugin-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-console-plugin-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/kiali-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/kiali-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp20/system\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp21/system\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp22/system\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp24/system\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp25/system\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp26/system\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp2/system-rhel7\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp2/system-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp2/system-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform/automation-dashboard-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-tech-preview/automation-dashboard-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_registry:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apicurio Registry 2\", \"packageName\": \"io.apicurio-apicurio-registry\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:connectivity_link:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Connectivity Link 1\", \"packageName\": \"rhcl-1/rhcl-console-plugin-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"mozjs60\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"pcs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"gjs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-dashboard-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-data-science-pipelines-argo-argoexec-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mlflow-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-maas-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-monitoring-plugin-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/argocd-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/argocd-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/console-plugin-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/kubevirt-console-plugin-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"nodejs-connected-react-router\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"nodejs-sass\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_portal:2\"], \"vendor\": \"Red Hat\", \"product\": \"Self-service automation portal 2\", \"packageName\": \"ansible-automation-platform/automation-portal\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-03-06T19:00:57.982Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-03-06T18:25:22.438Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:34342: Cluster Observability Operator 1.5.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19409: Migration Toolkit for Virtualization 2.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19410: Migration Toolkit for Virtualization 2.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:6428: Network Observability (NETOBSERV) 1.11.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:24473: Network Observability (NETOBSERV) 1.12.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36882: Red Hat Advanced Cluster Management for Kubernetes 2.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13548: Red Hat Advanced Cluster Management for Kubernetes 2.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13847: Red Hat Advanced Cluster Management for Kubernetes 2.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11070: Red Hat Advanced Cluster Security 4.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11217: Red Hat Advanced Cluster Security 4.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13791: Red Hat Advanced Cluster Security 4.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13829: Red Hat Advanced Cluster Security for Kubernetes 4.10\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9742: Red Hat Developer Hub 1.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13826: Red Hat Developer Hub 1.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:7329: Red Hat Discovery 2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36651: Red Hat Edge Manager 1.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40945: Red Hat Edge Manager 1.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40118: Red Hat Edge Manager 1.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41928: Red Hat Migration Toolkit 1.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:24977: Red Hat OpenShift AI 2.25\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19712: Red Hat OpenShift AI 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34049: Red Hat OpenShift Container Platform 4.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40022: Red Hat OpenShift Container Platform 4.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:28893: Red Hat OpenShift Container Platform 4.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:28964: Red Hat OpenShift Container Platform 4.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36621: Red Hat OpenShift Container Platform 4.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20088: Red Hat OpenShift Container Platform 4.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34100: Red Hat OpenShift Container Platform 4.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34099: Red Hat OpenShift Container Platform 4.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17598: Red Hat OpenShift Container Platform 4.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21658: Red Hat OpenShift Container Platform 4.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:29857: Red Hat OpenShift Container Platform 4.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21657: Red Hat OpenShift Container Platform 4.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:12118: Red Hat OpenShift Container Platform 4.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20042: Red Hat OpenShift Container Platform 4.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:29864: Red Hat OpenShift Container Platform 4.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23246: Red Hat OpenShift Container Platform 4.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20041: Red Hat OpenShift Container Platform 4.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17469: Red Hat OpenShift Container Platform 4.20\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:27063: Red Hat OpenShift Container Platform 4.20\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21703: Red Hat OpenShift Container Platform 4.20\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20034: Red Hat OpenShift Container Platform 4.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21931: Red Hat OpenShift Pipelines 1.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8483: Red Hat OpenShift Service Mesh 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8484: Red Hat OpenShift Service Mesh 3.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8490: Red Hat OpenShift Service Mesh 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8491: Red Hat OpenShift Service Mesh 3.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8493: Red Hat OpenShift Service Mesh 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41941: Red Hat Openshift Data Foundation 4.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41944: Red Hat Openshift Data Foundation 4.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40984: Red Hat Openshift Data Foundation 4.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:6720: Red Hat Quay 3.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:6568: Red Hat Quay 3.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19375: Red Hat Quay 3.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22465: Red Hat Quay 3.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11916: Red Hat Quay 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:6926: Red Hat Quay 3.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26232: Red Hat Satellite 6.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26225: Red Hat Satellite 6.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13853: multicluster engine for Kubernetes 2.11.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13542: multicluster engine for Kubernetes 2.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9848: multicluster engine for Kubernetes 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11858: multicluster engine for Kubernetes 2.7\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8218: multicluster engine for Kubernetes 2.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11414: multicluster engine for Kubernetes 2.9.0\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-03-06T18:25:22.438Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-29063\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2445291\", \"name\": \"RHBZ#2445291\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-29063.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34342\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19409\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19410\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:6428\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24473\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36882\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13548\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13847\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11070\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11217\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13791\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13829\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9742\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13826\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7329\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36651\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40945\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40118\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41928\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24977\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19712\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34049\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40022\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:28893\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:28964\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36621\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20088\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34100\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34099\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17598\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21658\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:29857\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21657\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:12118\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20042\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:29864\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23246\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20041\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17469\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:27063\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21703\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20034\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21931\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8483\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8484\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8490\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8491\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8493\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41941\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41944\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40984\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:6720\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:6568\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19375\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22465\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11916\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:6926\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26232\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26225\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13853\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13542\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9848\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11858\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8218\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11414\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-915\", \"description\": \"Improperly Controlled Modification of Dynamically-Determined Object Attributes\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-08-10T12:05:44.812Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-29063\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-03-06T19:32:37.694711Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-03-06T19:32:46.434Z\"}}], \"cna\": {\"title\": \"Immutable.js: Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027) in immutable\", \"source\": {\"advisory\": \"GHSA-wf6x-7x77-mvgw\", \"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"cvssV4_0\": {\"version\": \"4.0\", \"baseScore\": 8.7, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"NONE\", \"privilegesRequired\": \"NONE\", \"subIntegrityImpact\": \"NONE\", \"vulnIntegrityImpact\": \"NONE\", \"subAvailabilityImpact\": \"NONE\", \"vulnAvailabilityImpact\": \"NONE\", \"subConfidentialityImpact\": \"NONE\", \"vulnConfidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"vendor\": \"immutable-js\", \"product\": \"immutable-js\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003c 3.8.3\"}, {\"status\": \"affected\", \"version\": \"\u003c 4.3.7\"}, {\"status\": \"affected\", \"version\": \"\u003c 5.1.5\"}]}], \"references\": [{\"url\": \"https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw\", \"name\": \"https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3\", \"name\": \"https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8\", \"name\": \"https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5\", \"name\": \"https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5\", \"tags\": [\"x_refsource_MISC\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject() APIs. This issue has been patched in versions 3.8.3, 4.3.7, and 5.1.5.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-1321\", \"description\": \"CWE-1321: Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)\"}]}], \"providerMetadata\": {\"orgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"shortName\": \"GitHub_M\", \"dateUpdated\": \"2026-03-06T18:25:22.438Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-29063\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-10T12:05:44.812Z\", \"dateReserved\": \"2026-03-03T20:51:43.481Z\", \"assignerOrgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"datePublished\": \"2026-03-06T18:25:22.438Z\", \"assignerShortName\": \"GitHub_M\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
RHSA-2026:40984
Vulnerability from csaf_redhat - Published: 2026-07-16 11:26 - Updated: 2026-08-10 23:45Summary
Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.20.15 security, enhancement & bug fix update
Severity
Important
Notes
Topic: Red Hat OpenShift Data Foundation 4.20.15 security, enhancement & bug fix update
Details: Red Hat OpenShift Data Foundation 4.20.15 security, enhancement & bug fix update
FIXED BUGS:
==========
DFBUGS-7340: RHODF 4.20.15 release
DFBUGS-7331: [Backport for 4.20] - [GSS][ODF][MCG] noobaa-db-pg-cluster won't synchronize anymore - "could not receive data from WAL stream: ERROR: requested WAL segment 00000008000001C600000068 has already been removed"
DFBUGS-6939: [4.20.z] Integrate ibm-storage-odf-operator 1.9.0
DFBUGS-6666: [Backport to odf-4.20.z] Remove duplicate PersistentVolumeUsageCritical alerts
DFBUGS-6528: [Backport to 4.20.z] maintenance mode is always set for storageclients in non RDR clusters
DFBUGS-6522: CLONE 4.20 - [UI] Resource profile calculations doesn't include NFS
DFBUGS-5418: [Backport to odf-4.20.z]Local Storage Operator not installed install link broken in OCP 4.20
DFBUGS-4843: [Backport to odf-4.20.z] [RDR] Failover for an RBD appset workload remains stuck, workload pods don't restore
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in node-forge. This vulnerability allows unauthenticated attackers to bypass downstream cryptographic verifications and security decisions via crafting ASN.1 (Abstract Syntax Notation One) structures to desynchronize schema validations, yielding a semantic divergence.
8.7 (High)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.
8.2 (High)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in qs, a module used for parsing query strings. A remote attacker can exploit an improper input validation vulnerability by sending specially crafted HTTP requests that use bracket notation (e.g., `a[]=value`). This bypasses the `arrayLimit` option, which is designed to limit the size of parsed arrays and prevent resource exhaustion. Successful exploitation can lead to memory exhaustion, causing a Denial of Service (DoS) where the application crashes or becomes unresponsive, making the service unavailable to users.
7.5 (High)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Important
An ASN.1 Denial of Service (Dos) vulnerability exists in the node-forge asn1.fromDer function within forge/lib/asn1.js. The ASN.1 DER parser implementation (_fromDer) recurses for every constructed ASN.1 value (SEQUENCE, SET, etc.) and lacks a guard limiting recursion depth. An attacker can craft a small DER blob containing a very large nesting depth of constructed TLVs which causes the Node.js V8 engine to exhaust its call stack and throw RangeError: Maximum call stack size exceeded, crashing or incapacitating the process handling the parse. This is a remote, low-cost Denial-of-Service against applications that parse untrusted ASN.1 objects.
5.3 (Medium)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Moderate
An SSRF flaw has been discovered in Webpack. When experiments.buildHttp is enabled, webpack’s HTTP(S) resolver (HttpUriPlugin) enforces allowedUris only for the initial URL, but does not re-validate allowedUris after following HTTP 30x redirects. As a result, an import that appears restricted to a trusted allow-list can be redirected to HTTP(S) URLs outside the allow-list. This is a policy/allow-list bypass that enables build-time SSRF behavior (requests from the build machine to internal-only endpoints, depending on network access) and untrusted content inclusion in build outputs (redirected content is treated as module source and bundled).
CWE-918 - Server-Side Request Forgery (SSRF)Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Low
An SSRF flaw has been discovered in Webpack. When experiments.buildHttp is enabled, webpack’s HTTP(S) resolver (HttpUriPlugin) can be bypassed to fetch resources from hosts outside allowedUris by using crafted URLs that include userinfo (username:password@host). If allowedUris enforcement relies on a raw string prefix check (e.g., uri.startsWith(allowed)), a URL that looks allow-listed can pass validation while the actual network request is sent to a different authority/host after URL parsing. This is a policy/allow-list bypass that enables build-time SSRF behavior (outbound requests from the build machine to internal-only endpoints, depending on network access) and untrusted content inclusion (the fetched response is treated as module source and bundled).
CWE-918 - Server-Side Request Forgery (SSRF)Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Low
A flaw was found in ajv. When the $data option is enabled, the value of the pattern keyword is passed directly to the JavaScript RegExp() constructor without sufficient validation. An attacker able to supply a malicious regular expression pattern can trigger a ReDoS (Regular Expression Denial of Service), causing the application to become unresponsive and resulting in a denial of service.
7.5 (High)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Important
A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect.
8.0 (High)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Important
A denial of service flaw has been discovered in the fast-xml-parser npm library. In fast-xml-parser, a RangeError vulnerability exists in the numeric entity processing of fast-xml-parser when parsing XML with out-of-range entity code points (e.g., `�` or `�`). This causes the parser to throw an uncaught exception, crashing any application that processes untrusted XML input.
5.3 (Medium)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by providing a specially crafted XML input. The system incorrectly interprets a dot in a DOCTYPE entity name as a regular expression wildcard during processing. This allows the attacker to bypass security measures and inject malicious scripts, resulting in Cross-Site Scripting (XSS) when the parsed output is displayed to users.
7.1 (High)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Important
A denial of service flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by providing a specially crafted, small XML input. This input can force the XML parser to perform an unlimited amount of entity expansion, consuming excessive resources. This can lead to the application freezing for an extended period, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in minimatch. A remote attacker could exploit this Regular Expression Denial of Service (ReDoS) vulnerability by providing a specially crafted glob pattern. This pattern, containing numerous consecutive wildcard characters, causes excessive processing and exponential backtracking in the regular expression engine. Successful exploitation leads to a Denial of Service (DoS), making the application unresponsive.
6.5 (Medium)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Threats
Impact
Moderate
A flaw was found in minimatch. A remote attacker could exploit this vulnerability by providing a specially crafted glob expression with nested unbounded quantifiers. This could lead to catastrophic backtracking in the V8 JavaScript engine, causing the application to become unresponsive and resulting in a Denial of Service (DoS).
6.5 (Medium)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Threats
Impact
Moderate
A flaw was found in fast-xml-parser. A user can exploit this flaw by processing specially crafted XML data with the XML builder when the `preserveOrder` option is enabled. This can lead to a stack overflow, causing the application to crash and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Threats
Impact
Important
A flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by supplying specially crafted XML input containing numeric character references or standard XML entities. This input can bypass configured entity expansion limits, leading to excessive memory allocation and high CPU usage. The primary consequence is a Denial of Service (DoS), which can crash the affected process.
7.5 (High)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in github.com/jackc/pgx. This memory-safety vulnerability could potentially lead to unexpected behavior or system instability.
8.3 (High)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.
8.3 (High)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.
7.5 (High)
Affected products
Fixed
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 | — |
Workaround
|
Threats
Impact
Important
References
164 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Data Foundation 4.20.15 security, enhancement \u0026 bug fix update",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Data Foundation 4.20.15 security, enhancement \u0026 bug fix update\n\nFIXED BUGS:\n==========\nDFBUGS-7340: RHODF 4.20.15 release\nDFBUGS-7331: [Backport for 4.20] - [GSS][ODF][MCG] noobaa-db-pg-cluster won\u0027t synchronize anymore - \"could not receive data from WAL stream: ERROR: requested WAL segment 00000008000001C600000068 has already been removed\"\nDFBUGS-6939: [4.20.z] Integrate ibm-storage-odf-operator 1.9.0\nDFBUGS-6666: [Backport to odf-4.20.z] Remove duplicate PersistentVolumeUsageCritical alerts\nDFBUGS-6528: [Backport to 4.20.z] maintenance mode is always set for storageclients in non RDR clusters\nDFBUGS-6522: CLONE 4.20 - [UI] Resource profile calculations doesn\u0027t include NFS\nDFBUGS-5418: [Backport to odf-4.20.z]Local Storage Operator not installed install link broken in OCP 4.20\nDFBUGS-4843: [Backport to odf-4.20.z] [RDR] Failover for an RBD appset workload remains stuck, workload pods don\u0027t restore",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:40984",
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-12816",
"url": "https://access.redhat.com/security/cve/CVE-2025-12816"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-13465",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-15284",
"url": "https://access.redhat.com/security/cve/CVE-2025-15284"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66031",
"url": "https://access.redhat.com/security/cve/CVE-2025-66031"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68157",
"url": "https://access.redhat.com/security/cve/CVE-2025-68157"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68458",
"url": "https://access.redhat.com/security/cve/CVE-2025-68458"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69873",
"url": "https://access.redhat.com/security/cve/CVE-2025-69873"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-22029",
"url": "https://access.redhat.com/security/cve/CVE-2026-22029"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25128",
"url": "https://access.redhat.com/security/cve/CVE-2026-25128"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25896",
"url": "https://access.redhat.com/security/cve/CVE-2026-25896"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-26278",
"url": "https://access.redhat.com/security/cve/CVE-2026-26278"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-26996",
"url": "https://access.redhat.com/security/cve/CVE-2026-26996"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27904",
"url": "https://access.redhat.com/security/cve/CVE-2026-27904"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27942",
"url": "https://access.redhat.com/security/cve/CVE-2026-27942"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33036",
"url": "https://access.redhat.com/security/cve/CVE-2026-33036"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33815",
"url": "https://access.redhat.com/security/cve/CVE-2026-33815"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33816",
"url": "https://access.redhat.com/security/cve/CVE-2026-33816"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48779",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/",
"url": "https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_40984.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.20.15 security, enhancement \u0026 bug fix update",
"tracking": {
"current_release_date": "2026-08-10T23:45:03+00:00",
"generator": {
"date": "2026-08-10T23:45:03+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHSA-2026:40984",
"initial_release_date": "2026-07-16T11:26:54+00:00",
"revision_history": [
{
"date": "2026-07-16T11:26:54+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-10T23:45:03+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Openshift Data Foundation 4.2",
"product": {
"name": "Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_data_foundation:4.20::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Openshift Data Foundation"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9@sha256%3Affd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf?arch=amd64\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9\u0026tag=1783667125"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9-operator@sha256%3A330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664?arch=amd64\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9-operator\u0026tag=1783666755"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"product_id": "registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-operator-bundle@sha256%3A522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5?arch=amd64\u0026repository_url=registry.redhat.io/odf4/cephcsi-operator-bundle\u0026tag=1784058684"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"product": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"product_id": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mcg-core-rhel9@sha256%3A166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12?arch=amd64\u0026repository_url=registry.redhat.io/odf4/mcg-core-rhel9\u0026tag=1784054598"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"product": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"product_id": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mcg-rhel9-operator@sha256%3A5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783?arch=amd64\u0026repository_url=registry.redhat.io/odf4/mcg-rhel9-operator\u0026tag=1784055387"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"product": {
"name": "registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"product_id": "registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mcg-operator-bundle@sha256%3Ae4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326?arch=amd64\u0026repository_url=registry.redhat.io/odf4/mcg-operator-bundle\u0026tag=1784058849"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"product_id": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-console-rhel9@sha256%3Ae068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd?arch=amd64\u0026repository_url=registry.redhat.io/odf4/ocs-client-console-rhel9\u0026tag=1784055726"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"product_id": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-rhel9-operator@sha256%3A2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb?arch=amd64\u0026repository_url=registry.redhat.io/odf4/ocs-client-rhel9-operator\u0026tag=1783667517"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"product_id": "registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-operator-bundle@sha256%3A55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02?arch=amd64\u0026repository_url=registry.redhat.io/odf4/ocs-client-operator-bundle\u0026tag=1784059036"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"product": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"product_id": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-metrics-exporter-rhel9@sha256%3A92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e?arch=amd64\u0026repository_url=registry.redhat.io/odf4/ocs-metrics-exporter-rhel9\u0026tag=1783667577"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"product": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"product_id": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-rhel9-operator@sha256%3Ab0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5?arch=amd64\u0026repository_url=registry.redhat.io/odf4/ocs-rhel9-operator\u0026tag=1783667611"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"product": {
"name": "registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"product_id": "registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-operator-bundle@sha256%3Ad24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e?arch=amd64\u0026repository_url=registry.redhat.io/odf4/ocs-operator-bundle\u0026tag=1784059112"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"product_id": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-cli-rhel9@sha256%3A3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-cli-rhel9\u0026tag=1784055020"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"product_id": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-cloudnative-pg-rhel9-operator@sha256%3A9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator\u0026tag=1783667641"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"product_id": "registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-console-rhel9@sha256%3Ac0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-console-rhel9\u0026tag=1784055586"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"product_id": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-cosi-sidecar-rhel9@sha256%3A2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-cosi-sidecar-rhel9\u0026tag=1783667790"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-rhel9-operator@sha256%3A41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-rhel9-operator\u0026tag=1783667859"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-operator-bundle@sha256%3A30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-operator-bundle\u0026tag=1784059342"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-sidecar-rhel9@sha256%3Afbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9\u0026tag=1783667875"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"product_id": "registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-dependencies-operator-bundle@sha256%3Ae5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-dependencies-operator-bundle\u0026tag=1784059433"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"product_id": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-external-snapshotter-rhel9-operator@sha256%3Ab7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator\u0026tag=1783667869"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"product_id": "registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-external-snapshotter-operator-bundle@sha256%3Ad726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle\u0026tag=1784059499"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"product_id": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-external-snapshotter-sidecar-rhel9@sha256%3Abb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9\u0026tag=1783667877"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"product_id": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-console-rhel9@sha256%3A4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-console-rhel9\u0026tag=1784055576"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"product_id": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-rhel9-operator@sha256%3Aaf14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-rhel9-operator\u0026tag=1784055244"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"product_id": "registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-operator-bundle@sha256%3Ad3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-operator-bundle\u0026tag=1784059645"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"product_id": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-must-gather-rhel9@sha256%3Abaf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-must-gather-rhel9\u0026tag=1784055382"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"product_id": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-rhel9-operator@sha256%3Ad9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-rhel9-operator\u0026tag=1783668266"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"product_id": "registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-operator-bundle@sha256%3A73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-operator-bundle\u0026tag=1784060452"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"product_id": "registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-prometheus-operator-bundle@sha256%3A40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-prometheus-operator-bundle\u0026tag=1784059957"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"product": {
"name": "registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"product_id": "registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odr-cluster-operator-bundle@sha256%3Ab81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odr-cluster-operator-bundle\u0026tag=1784060765"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"product": {
"name": "registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"product_id": "registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odr-hub-operator-bundle@sha256%3Ab454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odr-hub-operator-bundle\u0026tag=1784060213"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"product": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"product_id": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odr-rhel9-operator@sha256%3Ae2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odr-rhel9-operator\u0026tag=1783668288"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"product": {
"name": "registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"product_id": "registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odr-recipe-operator-bundle@sha256%3A2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odr-recipe-operator-bundle\u0026tag=1784059917"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"product": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"product_id": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rook-ceph-rhel9-operator@sha256%3A7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29?arch=amd64\u0026repository_url=registry.redhat.io/odf4/rook-ceph-rhel9-operator\u0026tag=1783669219"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"product": {
"name": "registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"product_id": "registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rook-ceph-operator-bundle@sha256%3A06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657?arch=amd64\u0026repository_url=registry.redhat.io/odf4/rook-ceph-operator-bundle\u0026tag=1784059800"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9@sha256%3A940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9\u0026tag=1783667125"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9-operator@sha256%3A668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9-operator\u0026tag=1783666755"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"product_id": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/mcg-core-rhel9@sha256%3Ab61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/mcg-core-rhel9\u0026tag=1784054598"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"product_id": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/mcg-rhel9-operator@sha256%3Acf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/mcg-rhel9-operator\u0026tag=1784055387"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"product_id": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-console-rhel9@sha256%3A8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/ocs-client-console-rhel9\u0026tag=1784055726"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"product_id": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-rhel9-operator@sha256%3Aad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/ocs-client-rhel9-operator\u0026tag=1783667517"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"product_id": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ocs-metrics-exporter-rhel9@sha256%3A5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/ocs-metrics-exporter-rhel9\u0026tag=1783667577"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"product_id": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ocs-rhel9-operator@sha256%3Aafa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/ocs-rhel9-operator\u0026tag=1783667611"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-cli-rhel9@sha256%3A07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-cli-rhel9\u0026tag=1784055020"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-cloudnative-pg-rhel9-operator@sha256%3A69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator\u0026tag=1783667641"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-console-rhel9@sha256%3Ad8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-console-rhel9\u0026tag=1784055586"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-cosi-sidecar-rhel9@sha256%3A359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-cosi-sidecar-rhel9\u0026tag=1783667790"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-rhel9-operator@sha256%3A3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-rhel9-operator\u0026tag=1783667859"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-sidecar-rhel9@sha256%3A87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9\u0026tag=1783667875"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-external-snapshotter-rhel9-operator@sha256%3A38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator\u0026tag=1783667869"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-external-snapshotter-sidecar-rhel9@sha256%3A0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9\u0026tag=1783667877"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-console-rhel9@sha256%3Aca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-console-rhel9\u0026tag=1784055576"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-rhel9-operator@sha256%3A58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-rhel9-operator\u0026tag=1784055244"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-must-gather-rhel9@sha256%3A7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-must-gather-rhel9\u0026tag=1784055382"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-rhel9-operator@sha256%3Af7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-rhel9-operator\u0026tag=1783668266"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"product_id": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odr-rhel9-operator@sha256%3Add062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odr-rhel9-operator\u0026tag=1783668288"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"product_id": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rook-ceph-rhel9-operator@sha256%3A89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/rook-ceph-rhel9-operator\u0026tag=1783669219"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9@sha256%3Ad1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c?arch=s390x\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9\u0026tag=1783667125"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9-operator@sha256%3Ad2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27?arch=s390x\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9-operator\u0026tag=1783666755"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"product": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"product_id": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"product_identification_helper": {
"purl": "pkg:oci/mcg-core-rhel9@sha256%3A6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894?arch=s390x\u0026repository_url=registry.redhat.io/odf4/mcg-core-rhel9\u0026tag=1784054598"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"product": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"product_id": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"product_identification_helper": {
"purl": "pkg:oci/mcg-rhel9-operator@sha256%3A0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62?arch=s390x\u0026repository_url=registry.redhat.io/odf4/mcg-rhel9-operator\u0026tag=1784055387"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"product_id": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-console-rhel9@sha256%3A5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7?arch=s390x\u0026repository_url=registry.redhat.io/odf4/ocs-client-console-rhel9\u0026tag=1784055726"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"product_id": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-rhel9-operator@sha256%3A754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5?arch=s390x\u0026repository_url=registry.redhat.io/odf4/ocs-client-rhel9-operator\u0026tag=1783667517"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"product": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"product_id": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ocs-metrics-exporter-rhel9@sha256%3A55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac?arch=s390x\u0026repository_url=registry.redhat.io/odf4/ocs-metrics-exporter-rhel9\u0026tag=1783667577"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"product": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"product_id": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ocs-rhel9-operator@sha256%3A107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8?arch=s390x\u0026repository_url=registry.redhat.io/odf4/ocs-rhel9-operator\u0026tag=1783667611"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"product_id": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-cli-rhel9@sha256%3Ae6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-cli-rhel9\u0026tag=1784055020"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"product_id": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-cloudnative-pg-rhel9-operator@sha256%3A39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator\u0026tag=1783667641"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"product_id": "registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-console-rhel9@sha256%3A762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-console-rhel9\u0026tag=1784055586"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"product_id": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-cosi-sidecar-rhel9@sha256%3A225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-cosi-sidecar-rhel9\u0026tag=1783667790"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-rhel9-operator@sha256%3A08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-rhel9-operator\u0026tag=1783667859"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-sidecar-rhel9@sha256%3Aa742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9\u0026tag=1783667875"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"product_id": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-external-snapshotter-rhel9-operator@sha256%3A9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator\u0026tag=1783667869"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"product_id": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-external-snapshotter-sidecar-rhel9@sha256%3A601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9\u0026tag=1783667877"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"product_id": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-console-rhel9@sha256%3A5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-console-rhel9\u0026tag=1784055576"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"product_id": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-rhel9-operator@sha256%3Ae402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-rhel9-operator\u0026tag=1784055244"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"product_id": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-must-gather-rhel9@sha256%3A7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-must-gather-rhel9\u0026tag=1784055382"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"product_id": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-rhel9-operator@sha256%3A5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-rhel9-operator\u0026tag=1783668266"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"product": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"product_id": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odr-rhel9-operator@sha256%3A95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odr-rhel9-operator\u0026tag=1783668288"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"product": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"product_id": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rook-ceph-rhel9-operator@sha256%3A35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff?arch=s390x\u0026repository_url=registry.redhat.io/odf4/rook-ceph-rhel9-operator\u0026tag=1783669219"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9@sha256%3A7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77?arch=arm64\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9\u0026tag=1783667125"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9-operator@sha256%3A811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6?arch=arm64\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9-operator\u0026tag=1783666755"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"product": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"product_id": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/mcg-core-rhel9@sha256%3Aca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e?arch=arm64\u0026repository_url=registry.redhat.io/odf4/mcg-core-rhel9\u0026tag=1784054598"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"product": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"product_id": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"product_identification_helper": {
"purl": "pkg:oci/mcg-rhel9-operator@sha256%3A37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89?arch=arm64\u0026repository_url=registry.redhat.io/odf4/mcg-rhel9-operator\u0026tag=1784055387"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"product_id": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-console-rhel9@sha256%3A29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea?arch=arm64\u0026repository_url=registry.redhat.io/odf4/ocs-client-console-rhel9\u0026tag=1784055726"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"product_id": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-rhel9-operator@sha256%3A628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0?arch=arm64\u0026repository_url=registry.redhat.io/odf4/ocs-client-rhel9-operator\u0026tag=1783667517"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"product": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"product_id": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-metrics-exporter-rhel9@sha256%3Add5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d?arch=arm64\u0026repository_url=registry.redhat.io/odf4/ocs-metrics-exporter-rhel9\u0026tag=1783667577"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"product": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"product_id": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-rhel9-operator@sha256%3A657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096?arch=arm64\u0026repository_url=registry.redhat.io/odf4/ocs-rhel9-operator\u0026tag=1783667611"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"product_id": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-cli-rhel9@sha256%3A6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-cli-rhel9\u0026tag=1784055020"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"product_id": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-cloudnative-pg-rhel9-operator@sha256%3A03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator\u0026tag=1783667641"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"product_id": "registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-console-rhel9@sha256%3A5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-console-rhel9\u0026tag=1784055586"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"product_id": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-cosi-sidecar-rhel9@sha256%3A341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-cosi-sidecar-rhel9\u0026tag=1783667790"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-rhel9-operator@sha256%3A74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-rhel9-operator\u0026tag=1783667859"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-sidecar-rhel9@sha256%3A72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9\u0026tag=1783667875"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"product_id": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-external-snapshotter-rhel9-operator@sha256%3A6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator\u0026tag=1783667869"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"product_id": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-external-snapshotter-sidecar-rhel9@sha256%3A93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9\u0026tag=1783667877"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"product_id": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-console-rhel9@sha256%3A1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-console-rhel9\u0026tag=1784055576"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"product_id": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-rhel9-operator@sha256%3A9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-rhel9-operator\u0026tag=1784055244"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"product_id": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-must-gather-rhel9@sha256%3A4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-must-gather-rhel9\u0026tag=1784055382"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"product_id": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-rhel9-operator@sha256%3Adf9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-rhel9-operator\u0026tag=1783668266"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"product": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"product_id": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odr-rhel9-operator@sha256%3A331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odr-rhel9-operator\u0026tag=1783668288"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64",
"product": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64",
"product_id": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rook-ceph-rhel9-operator@sha256%3Aa54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0?arch=arm64\u0026repository_url=registry.redhat.io/odf4/rook-ceph-rhel9-operator\u0026tag=1783669219"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64"
},
"product_reference": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x"
},
"product_reference": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64"
},
"product_reference": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64"
},
"product_reference": "registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x"
},
"product_reference": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64"
},
"product_reference": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64"
},
"product_reference": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x"
},
"product_reference": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64"
},
"product_reference": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64"
},
"product_reference": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64"
},
"product_reference": "registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x"
},
"product_reference": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64"
},
"product_reference": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64"
},
"product_reference": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64"
},
"product_reference": "registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64"
},
"product_reference": "registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64"
},
"product_reference": "registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64"
},
"product_reference": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x"
},
"product_reference": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64"
},
"product_reference": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
},
"product_reference": "registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x"
},
"product_reference": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64"
},
"product_reference": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64 as a component of Red Hat Openshift Data Foundation 4.2",
"product_id": "Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
},
"product_reference": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-12816",
"cwe": {
"id": "CWE-179",
"name": "Incorrect Behavior Order: Early Validation"
},
"discovery_date": "2025-11-25T20:01:05.875196+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2417097"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in node-forge. This vulnerability allows unauthenticated attackers to bypass downstream cryptographic verifications and security decisions via crafting ASN.1 (Abstract Syntax Notation One) structures to desynchronize schema validations, yielding a semantic divergence.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products due to an interpretation conflict in the node-forge library. An unauthenticated attacker could exploit this flaw by crafting malicious ASN.1 structures, leading to a bypass of cryptographic verifications and security decisions in affected applications. This impacts various Red Hat products that utilize node-forge for cryptographic operations.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-12816"
},
{
"category": "external",
"summary": "RHBZ#2417097",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2417097"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-12816",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-12816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-12816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-12816"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge",
"url": "https://github.com/digitalbazaar/forge"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/pull/1124",
"url": "https://github.com/digitalbazaar/forge/pull/1124"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq"
},
{
"category": "external",
"summary": "https://kb.cert.org/vuls/id/521113",
"url": "https://kb.cert.org/vuls/id/521113"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/node-forge",
"url": "https://www.npmjs.com/package/node-forge"
}
],
"release_date": "2025-11-25T19:15:50.243000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications"
},
{
"cve": "CVE-2025-13465",
"cwe": {
"id": "CWE-1321",
"name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)"
},
"discovery_date": "2026-01-21T20:01:28.774829+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2431740"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: prototype pollution in _.unset and _.omit functions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is only exploitable by applications using the _.unset and _.omit functions on an object and allowing user input to determine the path of the property to be removed. This issue only allows the deletion of properties but does not allow overwriting their behavior, limiting the impact to a denial of service. Due to this reason, this vulnerability has been rated with an important severity.\n\nIn Grafana, JavaScript code runs only in the browser, while the server side is all Golang. Therefore, the worst-case scenario is a loss of functionality in the client application inside the browser. To reflect this, the CVSS availability metric and the severity of the Grafana and the Grafana-PCP component have been updated to low and moderate, respectively.\n\nThe lodash dependency is bundled and used by the pcs-web-ui component of the PCS package. In Red Hat Enterprise Linux 8.10, the pcs-web-ui component is no longer included in the PCS package. As a result, RHEL 8.10 does not ship the vulnerable lodash component within PCS and is therefore not-affected by this CVE.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "RHBZ#2431740",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431740"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13465",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13465"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg",
"url": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg"
}
],
"release_date": "2026-01-21T19:05:28.846000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement strict input validation before passing any property paths to the _.unset and _.omit functions to block attempts to access the prototype chain. Ensure that strings like __proto__, constructor and prototype are blocked, for example.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: prototype pollution in _.unset and _.omit functions"
},
{
"cve": "CVE-2025-15284",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-12-29T23:00:58.541337+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2425946"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in qs, a module used for parsing query strings. A remote attacker can exploit an improper input validation vulnerability by sending specially crafted HTTP requests that use bracket notation (e.g., `a[]=value`). This bypasses the `arrayLimit` option, which is designed to limit the size of parsed arrays and prevent resource exhaustion. Successful exploitation can lead to memory exhaustion, causing a Denial of Service (DoS) where the application crashes or becomes unresponsive, making the service unavailable to users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "qs: qs: Denial of Service via improper input validation in array parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products that utilize the `qs` module for parsing query strings, particularly when processing user-controlled input with bracket notation. The `arrayLimit` option, intended to prevent resource exhaustion, is bypassed when bracket notation (`a[]=value`) is used, allowing a remote attacker to cause a denial of service through memory exhaustion. This can lead to application crashes or unresponsiveness, making the service unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-15284"
},
{
"category": "external",
"summary": "RHBZ#2425946",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2425946"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-15284",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15284"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-15284",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15284"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9",
"url": "https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p",
"url": "https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p"
}
],
"release_date": "2025-12-29T22:56:45.240000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "qs: qs: Denial of Service via improper input validation in array parsing"
},
{
"cve": "CVE-2025-66031",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"discovery_date": "2025-11-26T23:01:36.363253+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2417397"
}
],
"notes": [
{
"category": "description",
"text": "An ASN.1 Denial of Service (Dos) vulnerability exists in the node-forge asn1.fromDer function within forge/lib/asn1.js. The ASN.1 DER parser implementation (_fromDer) recurses for every constructed ASN.1 value (SEQUENCE, SET, etc.) and lacks a guard limiting recursion depth. An attacker can craft a small DER blob containing a very large nesting depth of constructed TLVs which causes the Node.js V8 engine to exhaust its call stack and throw RangeError: Maximum call stack size exceeded, crashing or incapacitating the process handling the parse. This is a remote, low-cost Denial-of-Service against applications that parse untrusted ASN.1 objects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: node-forge ASN.1 Unbounded Recursion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66031"
},
{
"category": "external",
"summary": "RHBZ#2417397",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2417397"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66031",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66031"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66031",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66031"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/commit/260425c6167a38aae038697132483b5517b26451",
"url": "https://github.com/digitalbazaar/forge/commit/260425c6167a38aae038697132483b5517b26451"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27"
}
],
"release_date": "2025-11-26T22:23:26.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "node-forge: node-forge ASN.1 Unbounded Recursion"
},
{
"cve": "CVE-2025-68157",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-02-06T00:01:03.150548+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437210"
}
],
"notes": [
{
"category": "description",
"text": "An SSRF flaw has been discovered in Webpack. When experiments.buildHttp is enabled, webpack\u2019s HTTP(S) resolver (HttpUriPlugin) enforces allowedUris only for the initial URL, but does not re-validate allowedUris after following HTTP 30x redirects. As a result, an import that appears restricted to a trusted allow-list can be redirected to HTTP(S) URLs outside the allow-list. This is a policy/allow-list bypass that enables build-time SSRF behavior (requests from the build machine to internal-only endpoints, depending on network access) and untrusted content inclusion in build outputs (redirected content is treated as module source and bundled).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webpack: webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68157"
},
{
"category": "external",
"summary": "RHBZ#2437210",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437210"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68157",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68157"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68157",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68157"
},
{
"category": "external",
"summary": "https://github.com/webpack/webpack/security/advisories/GHSA-38r7-794h-5758",
"url": "https://github.com/webpack/webpack/security/advisories/GHSA-38r7-794h-5758"
}
],
"release_date": "2026-02-05T23:08:13.214000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "webpack: webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects"
},
{
"cve": "CVE-2025-68458",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-02-06T00:01:00.165396+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437209"
}
],
"notes": [
{
"category": "description",
"text": "An SSRF flaw has been discovered in Webpack. When experiments.buildHttp is enabled, webpack\u2019s HTTP(S) resolver (HttpUriPlugin) can be bypassed to fetch resources from hosts outside allowedUris by using crafted URLs that include userinfo (username:password@host). If allowedUris enforcement relies on a raw string prefix check (e.g., uri.startsWith(allowed)), a URL that looks allow-listed can pass validation while the actual network request is sent to a different authority/host after URL parsing. This is a policy/allow-list bypass that enables build-time SSRF behavior (outbound requests from the build machine to internal-only endpoints, depending on network access) and untrusted content inclusion (the fetched response is treated as module source and bundled).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webpack: webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68458"
},
{
"category": "external",
"summary": "RHBZ#2437209",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437209"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68458",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68458"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68458",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68458"
},
{
"category": "external",
"summary": "https://github.com/webpack/webpack/security/advisories/GHSA-8fgc-7cc6-rx7x",
"url": "https://github.com/webpack/webpack/security/advisories/GHSA-8fgc-7cc6-rx7x"
}
],
"release_date": "2026-02-05T23:08:01.102000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "webpack: webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior"
},
{
"cve": "CVE-2025-69873",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-02-11T19:01:32.953264+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2439070"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ajv. When the $data option is enabled, the value of the pattern keyword is passed directly to the JavaScript RegExp() constructor without sufficient validation. An attacker able to supply a malicious regular expression pattern can trigger a ReDoS (Regular Expression Denial of Service), causing the application to become unresponsive and resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ajv: ReDoS via $data reference",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, the $data option must be enabled and the attacker needs to be able to send a payload with a specially crafted regular expression to the application processing the input. A 31-character payload causes approximately 44 seconds of execution, with each additional character doubling the execution time. Therefore, even a small payload can cause an application to become unresponsive and eventually result in a denial of service. Due to this reason, this flaw has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69873"
},
{
"category": "external",
"summary": "RHBZ#2439070",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2439070"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69873",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69873"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69873",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69873"
},
{
"category": "external",
"summary": "https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69873-ajv-ReDoS.md",
"url": "https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69873-ajv-ReDoS.md"
}
],
"release_date": "2026-02-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "To mitigate this issue, disable the $data feature if your application does not require it. If $data must be used, implement strict validation of the input fields that are referenced by the pattern keyword to ensure they contain only expected and safe characters.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ajv: ReDoS via $data reference"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-22029",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-01-10T04:01:03.694749+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2428412"
}
],
"notes": [
{
"category": "description",
"text": "A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-22029"
},
{
"category": "external",
"summary": "RHBZ#2428412",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2428412"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-22029",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22029"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-22029",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22029"
},
{
"category": "external",
"summary": "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx",
"url": "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx"
}
],
"release_date": "2026-01-10T02:42:32.736000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects"
},
{
"cve": "CVE-2026-25128",
"cwe": {
"id": "CWE-248",
"name": "Uncaught Exception"
},
"discovery_date": "2026-01-30T16:01:27.320561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2435497"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw has been discovered in the fast-xml-parser npm library. In fast-xml-parser, a RangeError vulnerability exists in the numeric entity processing of fast-xml-parser when parsing XML with out-of-range entity code points (e.g., `\u0026#9999999;` or `\u0026#xFFFFFF;`). This causes the parser to throw an uncaught exception, crashing any application that processes untrusted XML input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-xml-parser: fast-xml-parser has RangeError DoS Numeric Entities Bug",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The availability impact of this flaw is limited to the application which bundles the fast-xml-parser library. Red Hat host systems are not at risk of availability impact.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25128"
},
{
"category": "external",
"summary": "RHBZ#2435497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2435497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25128",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25128"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25128",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25128"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/4e387f61c4a5cef792f6a2f42467013290bf95dc",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/4e387f61c4a5cef792f6a2f42467013290bf95dc"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.4",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.4"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-37qj-frw5-hhjh",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-37qj-frw5-hhjh"
}
],
"release_date": "2026-01-30T15:14:58.244000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "fast-xml-parser: fast-xml-parser has RangeError DoS Numeric Entities Bug"
},
{
"cve": "CVE-2026-25896",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-02-20T22:01:59.622413+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2441501"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by providing a specially crafted XML input. The system incorrectly interprets a dot in a DOCTYPE entity name as a regular expression wildcard during processing. This allows the attacker to bypass security measures and inject malicious scripts, resulting in Cross-Site Scripting (XSS) when the parsed output is displayed to users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-xml-parser: fast-xml-parser: Cross-Site Scripting (XSS) due to improper DOCTYPE entity handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has been assessed as IMPORTANT for Red Hat products. This vulnerability arises when the parsed XML output is subsequently rendered to users which requires the interaction of the user. The impact of this flaw is also limited to the user\u0027s browser context.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25896"
},
{
"category": "external",
"summary": "RHBZ#2441501",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2441501"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25896",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25896"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25896",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25896"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/943ef0eb1b2d3284e72dd74f44a042ee9f07026e",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/943ef0eb1b2d3284e72dd74f44a042ee9f07026e"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/ddcd0acf26ddd682cb0dc15a2bd6aa3b96bb1e69",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/ddcd0acf26ddd682cb0dc15a2bd6aa3b96bb1e69"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.5",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.5"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-m7jm-9gc2-mpf2",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-m7jm-9gc2-mpf2"
}
],
"release_date": "2026-02-20T20:57:48.074000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-xml-parser: fast-xml-parser: Cross-Site Scripting (XSS) due to improper DOCTYPE entity handling"
},
{
"cve": "CVE-2026-26278",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-02-19T21:03:33.363864+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2441120"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by providing a specially crafted, small XML input. This input can force the XML parser to perform an unlimited amount of entity expansion, consuming excessive resources. This can lead to the application freezing for an extended period, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-xml-parser: fast-xml-parser: Denial of Service via unlimited XML entity expansion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-26278"
},
{
"category": "external",
"summary": "RHBZ#2441120",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2441120"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-26278",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-26278"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-26278",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26278"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/910dae5be2de2955e968558fadf6e8f74f117a77",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/910dae5be2de2955e968558fadf6e8f74f117a77"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.6",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.6"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-jmr7-xgp7-cmfj",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-jmr7-xgp7-cmfj"
}
],
"release_date": "2026-02-19T19:40:55.842000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-xml-parser: fast-xml-parser: Denial of Service via unlimited XML entity expansion"
},
{
"cve": "CVE-2026-26996",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-02-20T04:01:11.896063+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2441268"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in minimatch. A remote attacker could exploit this Regular Expression Denial of Service (ReDoS) vulnerability by providing a specially crafted glob pattern. This pattern, containing numerous consecutive wildcard characters, causes excessive processing and exponential backtracking in the regular expression engine. Successful exploitation leads to a Denial of Service (DoS), making the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "minimatch: minimatch: Denial of Service via specially crafted glob patterns",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this flaw requires that a user or service processes untrusted input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-26996"
},
{
"category": "external",
"summary": "RHBZ#2441268",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2441268"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-26996",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-26996"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-26996",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26996"
},
{
"category": "external",
"summary": "https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5",
"url": "https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5"
},
{
"category": "external",
"summary": "https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26",
"url": "https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26"
}
],
"release_date": "2026-02-20T03:05:21.105000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "minimatch: minimatch: Denial of Service via specially crafted glob patterns"
},
{
"cve": "CVE-2026-27904",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-02-26T02:01:23.004531+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2442922"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in minimatch. A remote attacker could exploit this vulnerability by providing a specially crafted glob expression with nested unbounded quantifiers. This could lead to catastrophic backtracking in the V8 JavaScript engine, causing the application to become unresponsive and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this flaw requires that a user or service processes untrusted input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27904"
},
{
"category": "external",
"summary": "RHBZ#2442922",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2442922"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27904",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27904"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27904",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27904"
},
{
"category": "external",
"summary": "https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74",
"url": "https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74"
}
],
"release_date": "2026-02-26T01:07:42.693000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions"
},
{
"cve": "CVE-2026-27942",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-02-26T03:01:53.367202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2442938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-xml-parser. A user can exploit this flaw by processing specially crafted XML data with the XML builder when the `preserveOrder` option is enabled. This can lead to a stack overflow, causing the application to crash and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-xml-parser: fast-xml-parser: Stack overflow leads to Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The flaw affects the XML builder component of the fast-xml-parser library and is triggered only when the preserveOrder option is explicitly enabled. In Red Hat\u2013shipped configurations, this option is not enabled by default, and the vulnerable code path is therefore not exercised under typical deployments.\nThe underlying issue results in uncontrolled recursion leading to a stack overflow condition, which causes the application to terminate unexpectedly. While this can be triggered via crafted input, the impact is limited strictly to denial of service (DoS) and does not provide a mechanism for arbitrary code execution, privilege escalation, or data disclosure.\nFurthermore, exploitation requires that the affected application processes attacker-controlled XML input through the XML builder functionality with the specific vulnerable configuration enabled. This significantly reduces the attack surface and introduces environmental constraints not considered in the generalized NVD scoring.\n\nGiven the absence of confidentiality and integrity impact, the requirement for non-default configuration, and the limitation of the impact to process termination, Red Hat considers the practical risk to be lower than the NVD assessment. As such, this issue is classified as Moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27942"
},
{
"category": "external",
"summary": "RHBZ#2442938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2442938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27942",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27942"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27942",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27942"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/c13a961910f14986295dd28484eee830fa1a0e8a",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/c13a961910f14986295dd28484eee830fa1a0e8a"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/pull/791",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/pull/791"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-fj3w-jwp8-x2g3",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-fj3w-jwp8-x2g3"
}
],
"release_date": "2026-02-26T01:22:11.383000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, configure applications using the `fast-xml-parser` XML builder to set the `preserveOrder` option to `false`. Alternatively, ensure that all XML input data is thoroughly validated before being passed to the builder to prevent the processing of malicious or malformed content.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "fast-xml-parser: fast-xml-parser: Stack overflow leads to Denial of Service"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-33036",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-03-20T06:02:18.306021+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449458"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by supplying specially crafted XML input containing numeric character references or standard XML entities. This input can bypass configured entity expansion limits, leading to excessive memory allocation and high CPU usage. The primary consequence is a Denial of Service (DoS), which can crash the affected process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-xml-parser: fast-xml-parser: Denial of Service via XML entity expansion bypass",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33036"
},
{
"category": "external",
"summary": "RHBZ#2449458",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449458"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33036",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33036"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33036",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33036"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/bd26122c838e6a55e7d7ac49b4ccc01a49999a01",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/bd26122c838e6a55e7d7ac49b4ccc01a49999a01"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.5.6",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.5.6"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-8gc5-j5rx-235r",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-8gc5-j5rx-235r"
}
],
"release_date": "2026-03-20T05:17:03.290000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "fast-xml-parser: fast-xml-parser: Denial of Service via XML entity expansion bypass"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33815",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-04-07T16:01:25.130006+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455975"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in github.com/jackc/pgx. This memory-safety vulnerability could potentially lead to unexpected behavior or system instability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33815"
},
{
"category": "external",
"summary": "RHBZ#2455975",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455975"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33815",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33815"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33815",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33815"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4771",
"url": "https://pkg.go.dev/vuln/GO-2026-4771"
}
],
"release_date": "2026-04-07T15:19:24.344000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability"
},
{
"cve": "CVE-2026-33816",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-04-07T16:01:14.142946+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455972"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33816"
},
{
"category": "external",
"summary": "RHBZ#2455972",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455972"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33816",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4772",
"url": "https://pkg.go.dev/vuln/GO-2026-4772"
}
],
"release_date": "2026-04-07T15:19:24.529000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-48779",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-16T22:01:24.571224+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489661"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `ws` WebSocket library. A remote attacker can exploit this flaw by sending a high volume of small, fragmented data, leading to excessive memory consumption and subsequent process termination. This can result in service disruption for Red Hat products that utilize `ws` for WebSocket communication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "RHBZ#2489661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48779"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7",
"url": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53",
"url": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94",
"url": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8",
"url": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p"
}
],
"release_date": "2026-06-16T21:26:22.537000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T11:26:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.20/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:522d40e50ef3d69227addc4eb2d21110da67a71ab38a392a6a73de196e291ea5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:330cae7d058b96317b8491b53d5dae3fb6375a47b5744b30c9df116b029aa664_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:668dfe581c71024f3df2be60109cdb325190d7cd4d861e5fc3dfb6bd01dad986_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:811fb7e18f3ad662751bd217764ccbd3f551ad64eee318d6c56391f94d5fecf6_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:d2ef0fbc8fdbc8053b55cd9945985e30cdba8f3d1db56d67b0b2fa0b1af12d27_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:7d0ee8cf249dafabae40686c0a388721d9e57d704402a86551d247c8d8879f77_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:940cd4bc97f6ef3620baa0ebca7beee947c34be9355beabd68a32df3bb951087_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:d1d9ee046d756cb57e3a56589ee4682b2c14a1419ee8f3a7a6c287244caf8b2c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/cephcsi-rhel9@sha256:ffd512657b2587866bdd42012599027977206f8a1a11ea1119c1349e646d2ddf_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:166209cf6aba8304d21e726b01e8daa23ba9c55d101965af7361028502202d12_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:6e43cd07cd09a8ffbc0d93d231d700f13fdef16214d37c7a08e61ebb0705f894_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b61fbea3a0cd949c2cfe81ede0ef258cc5b9e40be586c5b9c8683661e3fd4cbf_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-core-rhel9@sha256:ca371cc6a86d0f550ed81f50617dec89a96d6f937df6e3aef5b901065577f05e_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-operator-bundle@sha256:e4a75de357d5dbea6ec922e69d6655c6ce4bc7ed8d5109c867004b6b7d80b326_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:0c1b66f5de4228ed4126a9539f0396d2cc66969ef681f627028216014dfaad62_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:37088cfa9eb040c313aeda47ebf25cdd6da56e8a590a9138ca733058c0cd4f89_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5e69d78a4bd6d1a2dbef5a67dfb37a12a63b20d4eee8f0996053d69c6ed32783_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cf2ddab5cce4e1745af69d57cfe7a30ed7d679535fdaec820c3e7e42ee6b4f21_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:29f2259cdd8f0c1816c00132494f18b8bb35242e7a66be8939423d3736fb2eea_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5745226a94969b986e5506d7ad87c3fe1c1f19b6bdb9e2793d1481c0110abac7_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:8db8b9f10bca358b10656a71aa6daab9b393e298da7bba612248ce44f5e01058_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:e068dee56a84a243982c14067354234d7440283c2c77284ddc1cc47ac0e4d4dd_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:55f4e42887bb170300981c39073628c0fed7e396fcb149a7b57fe6e7254cea02_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:2950615bac6bd9cf88f38e60d014edfb2e619aeff84b10e6f5756cdf74848deb_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:628546741792632dd843a88eec8ef184166a4a11ca5b852fdc5211ea4c5ddcf0_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:754f8f8710fdaa7d4235ae202ad84f351b554d8f208056b5f13248f330ea56e5_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:ad85aa77d1ef3243872eab3830ddd48d6d734b3db3a9eec84ba8488148e3e71d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:55bf353d6b4c47fe8fb265cfdb7b5305901d1c5165e9ce19d1b90b0168802fac_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:5d566c013690784aff986517cbe99c91724e9323b67f47144aa9ccf90750cc84_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:92ccfa2474af6dbb9f151200354ea4deb89fa9834f65197de6efbefb88978c2e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:dd5ce2895124aaa41713390bfdcda3ce1a2d4c0281408c3c4c3704a580cf248d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-operator-bundle@sha256:d24d8b73eab3f7be9d62b1e3fece5a8eac5bf306e9366aaa08bb47c7e8add71e_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:107536a3ea86764a82b053cdb5a1d496862c94e6770cdba28d88217c8eba4aa8_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:657da581a13815727c2e94577f8664c5ec22ad52a424394761ccdf9ffac26096_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:afa2835b21e4cae9c17435bb108a93dd8397a7ef4721b177f4790b7513e26141_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b0827b1d737226b230b1c82f580591d878d72af06bd0ee0ee8d5f3211b91cfe5_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:07a7b2b9a30cd03aef3807e21fbe9ee5397f68b4da982ea798d8a4c34cb6d829_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3630a5c480cb00b3e0343ae434ca8bfe6447be53d7cd56c2902d831ce8d4a093_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:6c6e2079444f21f140e990a50dceb186d59078d9f0b1f275ac6b7e6bce7b0718_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cli-rhel9@sha256:e6d4d68bd44ac64320f3e558af6f747da5c9fb8d0b9933adfd76e5e461129d46_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:03636a4e659c38b0d0944d8be9a1584fbf19d87b277d7eca34598c2f81a10cc9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:39231a05f80980b0a41ebe46768efd333df1e50ba24e11f191a199a9c6314a90_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:69da5ea2e8ff92d7cbe71ad531728cbe0c30b3826d3fd31f162fd8f76c496e23_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:9e6198c0e0bfd26e9431ca7c0f89122ff2c440994360928a7f4ddc883b2643b9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:5d48a8570af85bd000ffd009a8a14f76a63d5c67820bfae49da0017fbc7d0442_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:762280b4a2461eb8f74edec671189549a2a081c5c80e109510ec9dcffe343e35_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:c0bc9569d493470285397cceb42487a0a69f956b5bf29ab05147bed1ee73e9a0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-console-rhel9@sha256:d8307264ad60c670a95fb3d1786f3e4931daa9ce1f0b37d1ee88fe7b9f13a442_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:225b66c0fc3f90e9d2ad3c0256f28e9efbaad6406d1f95495118e14d2e1e4c81_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:2f52932f9e0b36925648fb44208f60039a8a9044d516675e36f831cbcc3e33ad_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:341a23d03fbb1185783b9a208f19a878de6aa7f3a06374e814e8225de976b5d7_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:359026fa10401ecff8ac805866bc4653d8e2078fdcdb15272b727ee7d3ec59ea_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30b284e612c4440793c445513ac7e488b5dd67ca0645366ed1b8249aa3317e01_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:08dfd5910f83132e5a941696997831696b05f71de113376e5c7dceda981e070d_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3040c3f2b7136c74ded0a355851f5ffabe771b8892bd0a20c9e5ee248dc9e224_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:41b64d69a9b2435fff4192543c877b0b9fe449b682b006a0bd58bbd348f9e0be_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:74b9066762ac94106aace909f6d39205476cb51d3c2c9f2dafdbf9072c0cf13d_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:72ae15e2e9774cafee010726285c5396d01383617ce8a872d3f7a6e618d39d70_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:87aab3b5b5074503713ec700da8272bb8b9bd1ff01b927acba22b706cc579128_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:a742cc0c5561b0904c99426fa69d67b4058e78c0909365765c4238a0d9446d50_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:fbde5909d4ff0c9804ed4342e3828021fa404d4ed49da36f5c8a83bddfed856c_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:e5db02deda355eb82187072f156c5bb469843e134133993f587dcf86c7f82bd2_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-operator-bundle@sha256:d726054bb579afb099b2a2515d3624cef3e42c3af548c9b363db573551f8aa8f_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:38af85e11e33248d7fb22028e5bbb14892fc6c9c106cbce3507587010cfa0a61_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:6ba7ddc6a4b8523366ac8d17c9b7506c76fa290b08192709607fa4f709a37149_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:9fb9f5064f1cc36952c6688b4126fb2034c34d0ccfdd346038ec73c8dfcc2a9e_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-rhel9-operator@sha256:b7b87c91d1ca506411a49935884ec894f079fec473306d92344d88133265a0d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:0054ea99c762956a92a8340e0bb27176f0cce5464c9d66b2518aa457e7397a5f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:601c24feed09e144e2c5198f5e0dadb70af1faa05309ec5eebb6f9b4c125e839_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:93b6ac7c591fdf4fc35fabd4f0caf76b2bc5fe5ccd7ad52eeee4d9bd84b553e9_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-external-snapshotter-sidecar-rhel9@sha256:bb2d553dcd006a65fa791090e1a0e415792522ce875ddea18b5a009dfb082bb3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:1c89dc12373601f7c34b6a61ba1779a00b67619dcdaa22f4829452b7281838b4_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:4e67f964fb45e8d018ee16f52a6d55a4a7dee3c81c63360490b34fbb2fcb11a7_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:5094c11d3080c3f9687a28a355e10891bd132337dce6abffa96ae9bb337fd30f_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:ca3a42affe38e6302694e97fe9111d4d4ca5d07a09ec45bbdb4c80e09871a7e9_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d3ed72b25b5390eba296876bd2629f8f56eb97963131f080e7fc32f448a96a19_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:58c688dd3b40d6fccac334dc5475be6ca812b2729ba8567429312a400af9077d_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:9b328073e0e7f608ca11485e7da2a224a5a577cf94b028642d9edbfd750a3092_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:af14a03f06bd4c89c43add8dd3ee82f717120efa71c8c95fb8ff06f041406a9b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:e402db6739683d105f17bfb5216bbf1e5824d56693d95d1cd546770e1651604c_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:4c6c43a80673283b24211582b4ef76217c412029b3a61835e2189cb92bf63f38_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f57f1642796ec1dc3c144a4687d3b7dfb9eba638971a494a539c5e86e874500_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:7f7bf1180b1fb2f67e8e86b999930c86cf5a8fdec4940272b223498ca25f8816_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:baf980c297fb2b4348eb99cd2ea8f05d5cfe2429e7f03f0bca68f2153f9fadc3_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-operator-bundle@sha256:73f325e7068c745656acbc8f5b6e2a0e8d23b6e47bcd128ebd8a79b9f75af84b_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:40d8e2ca1434e17fa6e5a9b3df28e652822908aae51f6e6ff405836e2269b504_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:5e682039d563344be28d3fc4aa703c8bb42b2006942dee28710ceaa79417fef6_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d9dab6dd42f7bf78c529d68c3c01931faf6df1f9e1635934c1a1a3e9ae70a1f0_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:df9b2ab8c0af7790cb37b51fd4defd579d999253613812e701ed3c80769d4c57_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odf-rhel9-operator@sha256:f7e593b3cf3574b68116d7c665263cde49484aad09a237a9f5739b28adc5802f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:b81cd403cb4d165c8ad5adb5cfdb6fd583104dc929b245bfd1eeb78af1776505_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:b454a2aecf238329a1c28fa978e3003917ac28fbf24d06c5724696be8d2ab1aa_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:2300184bfeb526a402eceb6582794d84bc949b4963de8a503ee308de19969985_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:331a05e10583a02a546edf60e6da2a2e22278594fb70d6c1713aa16d16029850_arm64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:95d6257bf2daf02666103c7f15febd86e9aa61ccb700c616d2eca0ae0e1b2fae_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:dd062af860d669958ced4edaa47ff8e17067a34089a003ab6ac2a9c61ec4224f_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/odr-rhel9-operator@sha256:e2c6e98fa4ba8eb59c76c5a62f544a332da2a1e81ce95094bb3df7acf4fbb3d9_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:06d46cfc28ce9af241436a93f653a3e7fe894a363b71890b67931b42ed06f657_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:35da53ac959ab8e6f1cc04aad03869f2f614b8eb86ccad7484f4c3d24d9899ff_s390x",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:7bf1cd386b3a4e5c4d0417770b724146face0929a397c79e43f2b7494c94ae29_amd64",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:89adf65f90b6eda141e8f7ee1c3d298b230d4fa6a139112398d7aeefb7924f89_ppc64le",
"Red Hat Openshift Data Foundation 4.2:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:a54e1ffeddc2efd1ed5479505b309659ee57dda37b2498f984c30ec15d1366e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments"
}
]
}
RHSA-2026:41928
Vulnerability from csaf_redhat - Published: 2026-07-20 08:34 - Updated: 2026-08-10 23:45Summary
Red Hat Security Advisory: Red Hat Migration Toolkit for Containers
Severity
Important
Notes
Topic: A new version of Migration Toolkit for Containers (MTC) is now available.
Details: The Migration Toolkit for Containers (MTC) enables you to migrate
Kubernetes resources, persistent volume data, and internal container images
between OpenShift Container Platform clusters, using the MTC web console or
the Kubernetes API.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A vulnerability related to predictable random number generation has been discovered in the form-data JavaScript library. The library utilizes Math.random() to determine boundary values for multipart form-encoded data. This presents a security risk if an attacker can observe other values generated by Math.random() within the target application and simultaneously control at least one field of a request made using form-data. Under these conditions, the attacker could potentially predict or determine the boundary values. This predictability could be leveraged to bypass security controls, manipulate form data, or potentially lead to data integrity issues or other forms of exploitation.
5.4 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in node-forge. This vulnerability allows unauthenticated attackers to bypass downstream cryptographic verifications and security decisions via crafting ASN.1 (Abstract Syntax Notation One) structures to desynchronize schema validations, yielding a semantic divergence.
8.7 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in qs, a module used for parsing query strings. A remote attacker can exploit an improper input validation vulnerability by sending specially crafted HTTP requests that use bracket notation (e.g., `a[]=value`). This bypasses the `arrayLimit` option, which is designed to limit the size of parsed arrays and prevent resource exhaustion. Successful exploitation can lead to memory exhaustion, causing a Denial of Service (DoS) where the application crashes or becomes unresponsive, making the service unavailable to users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in runc. This attack is a more sophisticated variant of CVE-2019-16884, which was a flaw that allowed an attacker to trick runc into writing the LSM process labels for a container process into a dummy tmpfs file and thus not apply the correct LSM labels to the container process. The mitigation applied for CVE-2019-16884 was fairly limited and effectively only caused runc to verify that when we write LSM labels that those labels are actual procfs files.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go program to try to allocate a large amount of memory, causing an out-of-memory condition and resulting in a denial of service.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A denial of service flaw has been discovered in the Axios npm package. When Axios runs on Node.js and is given a URL with the `data:` scheme, it does not perform HTTP. Instead, its Node http adapter decodes the entire payload into memory (`Buffer`/`Blob`) and returns a synthetic 200 response. This path ignores `maxContentLength` / `maxBodyLength` (which only protect HTTP responses), so an attacker can supply a very large `data:` URI and cause the process to allocate unbounded memory and crash (DoS), even if the caller requested responseType: 'stream'.
5.3 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Vendor Fix
fix
|
Known not affected
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.
7.0 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
An ASN.1 Denial of Service (Dos) vulnerability exists in the node-forge asn1.fromDer function within forge/lib/asn1.js. The ASN.1 DER parser implementation (_fromDer) recurses for every constructed ASN.1 value (SEQUENCE, SET, etc.) and lacks a guard limiting recursion depth. An attacker can craft a small DER blob containing a very large nesting depth of constructed TLVs which causes the Node.js V8 engine to exhaust its call stack and throw RangeError: Maximum call stack size exceeded, crashing or incapacitating the process handling the parse. This is a remote, low-cost Denial-of-Service against applications that parse untrusted ASN.1 objects.
5.3 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Threats
Impact
Important
A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Fulcio, a free-to-use certificate authority. This vulnerability allows a denial of service (DoS) due to excessive memory allocation when processing a malicious OpenID Connect (OIDC) identity token containing numerous period characters.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Moderate
A decompression based denial of service flaw has been discovered in the AIOHTTP python library. Library versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host's memory.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in aiohttp, an asynchronous HTTP client/server framework for Python. A remote attacker could exploit this vulnerability by sending a specially crafted POST request to an application using the Request.post() method, provided that Python optimizations are enabled. This could lead to an infinite loop, resulting in a Denial of Service (DoS) attack, making the affected application unavailable.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in aiohttp. A remote attacker can craft a malicious request that, when processed by an aiohttp server using the `Request.post()` method, causes the server's memory to fill uncontrollably. This can lead to a Denial of Service (DoS) by freezing the server, making it unavailable to legitimate users.
6.8 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI's intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in webpack-dev-server. When a user configures a proxy with a broad context, such as '/', and enables WebSocket (ws: true) forwarding, the development server's own Hot Module Replacement (HMR) WebSocket can be intercepted. This interception leads to the leakage of the browser's cookies and Origin header to the proxy target, bypassing the server's Host/Origin validation. Additionally, it can corrupt the HMR socket, resulting in a denial of service for the HMR functionality.
7.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Threats
Impact
Important
A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect.
8.0 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in pyasn1, a generic ASN.1 library for Python. A remote attacker could exploit this vulnerability by sending a specially crafted RELATIVE-OID with excessive continuation octets. This input validation vulnerability leads to memory exhaustion, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in the node-tar library. This vulnerability allows an attacker to craft malicious archives that, when extracted, can bypass intended security restrictions. This leads to arbitrary file overwrite and symlink poisoning, potentially allowing unauthorized modification of files on the system.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in follow-redirects. When an HTTP request follows a cross-domain redirect (a redirection to a different domain), custom authentication headers, such as X-API-Key or X-Auth-Token, are not properly stripped. This allows these sensitive headers to be forwarded verbatim to the redirect target, potentially leading to the unintended disclosure of authentication information to an untrusted third party.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as prototype pollution, allows an attacker to inject malicious properties into core JavaScript objects. When another component in the same application environment is compromised and pollutes the system's object prototype, Axios can unknowingly use these manipulated values in its outbound network requests. This could lead to the disclosure of sensitive information or the alteration of network communications, compromising data confidentiality and integrity.
7.4 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user's browser.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
References
448 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "A new version of Migration Toolkit for Containers (MTC) is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "The Migration Toolkit for Containers (MTC) enables you to migrate\nKubernetes resources, persistent volume data, and internal container images\nbetween OpenShift Container Platform clusters, using the MTC web console or\nthe Kubernetes API.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:41928",
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-12816",
"url": "https://access.redhat.com/security/cve/CVE-2025-12816"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-13465",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-15284",
"url": "https://access.redhat.com/security/cve/CVE-2025-15284"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-52881",
"url": "https://access.redhat.com/security/cve/CVE-2025-52881"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58183",
"url": "https://access.redhat.com/security/cve/CVE-2025-58183"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58754",
"url": "https://access.redhat.com/security/cve/CVE-2025-58754"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61726",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61729",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-62718",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66031",
"url": "https://access.redhat.com/security/cve/CVE-2025-66031"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66418",
"url": "https://access.redhat.com/security/cve/CVE-2025-66418"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66471",
"url": "https://access.redhat.com/security/cve/CVE-2025-66471"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66506",
"url": "https://access.redhat.com/security/cve/CVE-2025-66506"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69223",
"url": "https://access.redhat.com/security/cve/CVE-2025-69223"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69227",
"url": "https://access.redhat.com/security/cve/CVE-2025-69227"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69228",
"url": "https://access.redhat.com/security/cve/CVE-2025-69228"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-7783",
"url": "https://access.redhat.com/security/cve/CVE-2025-7783"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13149",
"url": "https://access.redhat.com/security/cve/CVE-2026-13149"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13676",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-21441",
"url": "https://access.redhat.com/security/cve/CVE-2026-21441"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-22029",
"url": "https://access.redhat.com/security/cve/CVE-2026-22029"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-23490",
"url": "https://access.redhat.com/security/cve/CVE-2026-23490"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-23745",
"url": "https://access.redhat.com/security/cve/CVE-2026-23745"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27137",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-30922",
"url": "https://access.redhat.com/security/cve/CVE-2026-30922"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32283",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40895",
"url": "https://access.redhat.com/security/cve/CVE-2026-40895"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42264",
"url": "https://access.redhat.com/security/cve/CVE-2026-42264"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42338",
"url": "https://access.redhat.com/security/cve/CVE-2026-42338"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45736",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45822",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48779",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6322",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9277",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9595",
"url": "https://access.redhat.com/security/cve/CVE-2026-9595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/migration_toolkit_for_containers/index",
"url": "https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/migration_toolkit_for_containers/index"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41928.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Migration Toolkit for Containers",
"tracking": {
"current_release_date": "2026-08-10T23:45:03+00:00",
"generator": {
"date": "2026-08-10T23:45:03+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHSA-2026:41928",
"initial_release_date": "2026-07-20T08:34:29+00:00",
"revision_history": [
{
"date": "2026-07-20T08:34:29+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-10T23:45:03+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Migration Toolkit 1.8",
"product": {
"name": "Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhmt:1.8::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Migration Toolkit"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-controller-rhel8@sha256%3Ac6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-controller-rhel8\u0026tag=1783953372"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-hook-runner-rhel8@sha256%3A02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8\u0026tag=1783931722"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-log-reader-rhel8@sha256%3Aa95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8\u0026tag=1783914253"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-must-gather-rhel8@sha256%3A7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8\u0026tag=1783914261"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-openvpn-rhel8@sha256%3Af7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8\u0026tag=1783914237"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-rhel8-operator@sha256%3A351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-rhel8-operator\u0026tag=1783969382"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-operator-bundle@sha256%3A7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-operator-bundle\u0026tag=1783969793"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-registry-rhel8@sha256%3A69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-registry-rhel8\u0026tag=1783914276"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-rsync-transfer-rhel8@sha256%3A5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8\u0026tag=1783914257"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-ui-rhel8@sha256%3Ad2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-ui-rhel8\u0026tag=1783690532"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-velero-plugin-for-mtc-rhel8@sha256%3Aee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8\u0026tag=1783914255"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-7783",
"cwe": {
"id": "CWE-330",
"name": "Use of Insufficiently Random Values"
},
"discovery_date": "2025-07-18T17:00:43.396637+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2381959"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability related to predictable random number generation has been discovered in the form-data JavaScript library. The library utilizes Math.random() to determine boundary values for multipart form-encoded data.\n\nThis presents a security risk if an attacker can observe other values generated by Math.random() within the target application and simultaneously control at least one field of a request made using form-data. Under these conditions, the attacker could potentially predict or determine the boundary values. This predictability could be leveraged to bypass security controls, manipulate form data, or potentially lead to data integrity issues or other forms of exploitation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: Unsafe random function in form-data",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw does not affect host systems. The impact of this vulnerability is limited to specific applications which integrate the `form-data` library. As a result the impact of this CVE is limited on RedHat systems.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-7783"
},
{
"category": "external",
"summary": "RHBZ#2381959",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2381959"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-7783",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7783"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-7783",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7783"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0",
"url": "https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-fjxv-7rqg-78g4",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-fjxv-7rqg-78g4"
}
],
"release_date": "2025-07-18T16:34:44.889000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "form-data: Unsafe random function in form-data"
},
{
"cve": "CVE-2025-12816",
"cwe": {
"id": "CWE-179",
"name": "Incorrect Behavior Order: Early Validation"
},
"discovery_date": "2025-11-25T20:01:05.875196+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2417097"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in node-forge. This vulnerability allows unauthenticated attackers to bypass downstream cryptographic verifications and security decisions via crafting ASN.1 (Abstract Syntax Notation One) structures to desynchronize schema validations, yielding a semantic divergence.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products due to an interpretation conflict in the node-forge library. An unauthenticated attacker could exploit this flaw by crafting malicious ASN.1 structures, leading to a bypass of cryptographic verifications and security decisions in affected applications. This impacts various Red Hat products that utilize node-forge for cryptographic operations.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-12816"
},
{
"category": "external",
"summary": "RHBZ#2417097",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2417097"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-12816",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-12816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-12816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-12816"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge",
"url": "https://github.com/digitalbazaar/forge"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/pull/1124",
"url": "https://github.com/digitalbazaar/forge/pull/1124"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq"
},
{
"category": "external",
"summary": "https://kb.cert.org/vuls/id/521113",
"url": "https://kb.cert.org/vuls/id/521113"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/node-forge",
"url": "https://www.npmjs.com/package/node-forge"
}
],
"release_date": "2025-11-25T19:15:50.243000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications"
},
{
"cve": "CVE-2025-13465",
"cwe": {
"id": "CWE-1321",
"name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)"
},
"discovery_date": "2026-01-21T20:01:28.774829+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2431740"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: prototype pollution in _.unset and _.omit functions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is only exploitable by applications using the _.unset and _.omit functions on an object and allowing user input to determine the path of the property to be removed. This issue only allows the deletion of properties but does not allow overwriting their behavior, limiting the impact to a denial of service. Due to this reason, this vulnerability has been rated with an important severity.\n\nIn Grafana, JavaScript code runs only in the browser, while the server side is all Golang. Therefore, the worst-case scenario is a loss of functionality in the client application inside the browser. To reflect this, the CVSS availability metric and the severity of the Grafana and the Grafana-PCP component have been updated to low and moderate, respectively.\n\nThe lodash dependency is bundled and used by the pcs-web-ui component of the PCS package. In Red Hat Enterprise Linux 8.10, the pcs-web-ui component is no longer included in the PCS package. As a result, RHEL 8.10 does not ship the vulnerable lodash component within PCS and is therefore not-affected by this CVE.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "RHBZ#2431740",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431740"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13465",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13465"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg",
"url": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg"
}
],
"release_date": "2026-01-21T19:05:28.846000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement strict input validation before passing any property paths to the _.unset and _.omit functions to block attempts to access the prototype chain. Ensure that strings like __proto__, constructor and prototype are blocked, for example.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: prototype pollution in _.unset and _.omit functions"
},
{
"cve": "CVE-2025-15284",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-12-29T23:00:58.541337+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2425946"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in qs, a module used for parsing query strings. A remote attacker can exploit an improper input validation vulnerability by sending specially crafted HTTP requests that use bracket notation (e.g., `a[]=value`). This bypasses the `arrayLimit` option, which is designed to limit the size of parsed arrays and prevent resource exhaustion. Successful exploitation can lead to memory exhaustion, causing a Denial of Service (DoS) where the application crashes or becomes unresponsive, making the service unavailable to users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "qs: qs: Denial of Service via improper input validation in array parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products that utilize the `qs` module for parsing query strings, particularly when processing user-controlled input with bracket notation. The `arrayLimit` option, intended to prevent resource exhaustion, is bypassed when bracket notation (`a[]=value`) is used, allowing a remote attacker to cause a denial of service through memory exhaustion. This can lead to application crashes or unresponsiveness, making the service unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-15284"
},
{
"category": "external",
"summary": "RHBZ#2425946",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2425946"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-15284",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15284"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-15284",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15284"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9",
"url": "https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p",
"url": "https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p"
}
],
"release_date": "2025-12-29T22:56:45.240000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "qs: qs: Denial of Service via improper input validation in array parsing"
},
{
"cve": "CVE-2025-52881",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2025-10-17T14:19:18.652000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2404715"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in runc. This attack is a more sophisticated variant of CVE-2019-16884, which was a flaw that allowed an attacker to trick runc into writing the LSM process labels for a container process into a dummy tmpfs file and thus not apply the correct LSM labels to the container process. The mitigation applied for CVE-2019-16884 was fairly limited and effectively only caused runc to verify that when we write LSM labels that those labels are actual procfs files.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat considers this as an Important flaw since the impact is limited to local attack with minimal privileges in order to jeopardize the environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-52881"
},
{
"category": "external",
"summary": "RHBZ#2404715",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2404715"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-52881",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-52881"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-52881",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-52881"
},
{
"category": "external",
"summary": "https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm",
"url": "https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm"
},
{
"category": "external",
"summary": "https://github.com/opencontainers/selinux/pull/237",
"url": "https://github.com/opencontainers/selinux/pull/237"
}
],
"release_date": "2025-11-05T09:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Potential mitigations for this issue include:\n\n* Using rootless containers, as doing so will block most of the inadvertent writes (runc would run with reduced privileges, making attempts to write to procfs files ineffective).\n* Based on our analysis, neither AppArmor or SELinux can protect against the full version of the redirected write attack. The container runtime is generally privileged enough to write to arbitrary procfs files, which is more than sufficient to cause a container breakout.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects"
},
{
"cve": "CVE-2025-58183",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-10-29T23:01:50.573951+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2407258"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go program to try to allocate a large amount of memory, causing an out-of-memory condition and resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to be able to process a specially crafted GNU tar pax 1.0 archive with the application using the archive/tar package. Additionally, this issue can cause the Go application to allocate a large amount of memory, eventually leading to an out-of-memory condition and resulting in a denial of service with no other security impact. Due to these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58183"
},
{
"category": "external",
"summary": "RHBZ#2407258",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2407258"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58183",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58183"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58183",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58183"
},
{
"category": "external",
"summary": "https://go.dev/cl/709861",
"url": "https://go.dev/cl/709861"
},
{
"category": "external",
"summary": "https://go.dev/issue/75677",
"url": "https://go.dev/issue/75677"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI",
"url": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4014",
"url": "https://pkg.go.dev/vuln/GO-2025-4014"
}
],
"release_date": "2025-10-29T22:10:14.376000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map"
},
{
"cve": "CVE-2025-58754",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-09-12T02:00:53.897605+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2394735"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw has been discovered in the Axios npm package. When Axios runs on Node.js and is given a URL with the `data:` scheme, it does not perform HTTP. Instead, its Node http adapter decodes the entire payload into memory (`Buffer`/`Blob`) and returns a synthetic 200 response.\nThis path ignores `maxContentLength` / `maxBodyLength` (which only protect HTTP responses), so an attacker can supply a very large `data:` URI and cause the process to allocate unbounded memory and crash (DoS), even if the caller requested responseType: \u0027stream\u0027.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios DoS via lack of data size check",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Availability impact is limited to the application which bundles axios and not the host Red Hat system.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58754"
},
{
"category": "external",
"summary": "RHBZ#2394735",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2394735"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58754",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58754"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58754",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58754"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/945435fc51467303768202250debb8d4ae892593",
"url": "https://github.com/axios/axios/commit/945435fc51467303768202250debb8d4ae892593"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/7011",
"url": "https://github.com/axios/axios/pull/7011"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.12.0",
"url": "https://github.com/axios/axios/releases/tag/v1.12.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-4hjh-wcwx-xvwj",
"url": "https://github.com/axios/axios/security/advisories/GHSA-4hjh-wcwx-xvwj"
}
],
"release_date": "2025-09-12T01:16:40.513000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "axios: Axios DoS via lack of data size check"
},
{
"cve": "CVE-2025-61726",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:42.791305+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "RHBZ#2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://go.dev/cl/736712",
"url": "https://go.dev/cl/736712"
},
{
"category": "external",
"summary": "https://go.dev/issue/77101",
"url": "https://go.dev/issue/77101"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4341",
"url": "https://pkg.go.dev/vuln/GO-2026-4341"
}
],
"release_date": "2026-01-28T19:30:31.215000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2025-62718",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-09T15:01:48.111177+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456913"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has limited impact due to combination of non-default conditions to exploit: the attacker must be able to control or influence URLs passed to axios in a server-side context, the application must have both `HTTP_PROXY` and `NO_PROXY` configured, and the proxy itself must be positioned to act on the misdirected traffic or have been compromised by the attacker to intercept the rerouted traffic.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "RHBZ#2456913",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456913"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-62718",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-62718"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1",
"url": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2",
"url": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df",
"url": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10661",
"url": "https://github.com/axios/axios/pull/10661"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5"
}
],
"release_date": "2026-04-09T14:31:46.067000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization"
},
{
"cve": "CVE-2025-66031",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"discovery_date": "2025-11-26T23:01:36.363253+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2417397"
}
],
"notes": [
{
"category": "description",
"text": "An ASN.1 Denial of Service (Dos) vulnerability exists in the node-forge asn1.fromDer function within forge/lib/asn1.js. The ASN.1 DER parser implementation (_fromDer) recurses for every constructed ASN.1 value (SEQUENCE, SET, etc.) and lacks a guard limiting recursion depth. An attacker can craft a small DER blob containing a very large nesting depth of constructed TLVs which causes the Node.js V8 engine to exhaust its call stack and throw RangeError: Maximum call stack size exceeded, crashing or incapacitating the process handling the parse. This is a remote, low-cost Denial-of-Service against applications that parse untrusted ASN.1 objects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: node-forge ASN.1 Unbounded Recursion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66031"
},
{
"category": "external",
"summary": "RHBZ#2417397",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2417397"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66031",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66031"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66031",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66031"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/commit/260425c6167a38aae038697132483b5517b26451",
"url": "https://github.com/digitalbazaar/forge/commit/260425c6167a38aae038697132483b5517b26451"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27"
}
],
"release_date": "2025-11-26T22:23:26.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "node-forge: node-forge ASN.1 Unbounded Recursion"
},
{
"cve": "CVE-2025-66418",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-12-05T17:01:20.277857+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419455"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66418"
},
{
"category": "external",
"summary": "RHBZ#2419455",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419455"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66418",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66418"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66418",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66418"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8",
"url": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53"
}
],
"release_date": "2025-12-05T16:02:15.271000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion"
},
{
"cve": "CVE-2025-66471",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2025-12-05T17:02:21.597728+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419467"
}
],
"notes": [
{
"category": "description",
"text": "A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3 Streaming API improperly handles highly compressed data",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in urllib3\u0027s streaming API that can lead to excessive resource consumption, including high CPU usage and significant memory allocation. When processing highly compressed data from untrusted sources, even small requested chunks can trigger full decompression, posing a denial-of-service risk to client-side applications utilizing affected urllib3 versions prior to 2.6.0.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66471"
},
{
"category": "external",
"summary": "RHBZ#2419467",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419467"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66471",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66471"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66471",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66471"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7",
"url": "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37"
}
],
"release_date": "2025-12-05T16:06:08.531000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3 Streaming API improperly handles highly compressed data"
},
{
"cve": "CVE-2025-66506",
"cwe": {
"id": "CWE-405",
"name": "Asymmetric Resource Consumption (Amplification)"
},
"discovery_date": "2025-12-04T23:01:20.507333+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419056"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Fulcio, a free-to-use certificate authority. This vulnerability allows a denial of service (DoS) due to excessive memory allocation when processing a malicious OpenID Connect (OIDC) identity token containing numerous period characters.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat as Fulcio, a certificate authority used for issuing code signing certificates, is susceptible to a denial of service when processing a specially crafted OpenID Connect (OIDC) token. This could lead to resource exhaustion and service unavailability in affected Red Hat products that utilize Fulcio.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66506"
},
{
"category": "external",
"summary": "RHBZ#2419056",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419056"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66506",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66506"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66506",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66506"
},
{
"category": "external",
"summary": "https://github.com/sigstore/fulcio/commit/765a0e57608b9ef390e1eeeea8595b9054c63a5a",
"url": "https://github.com/sigstore/fulcio/commit/765a0e57608b9ef390e1eeeea8595b9054c63a5a"
},
{
"category": "external",
"summary": "https://github.com/sigstore/fulcio/security/advisories/GHSA-f83f-xpx7-ffpw",
"url": "https://github.com/sigstore/fulcio/security/advisories/GHSA-f83f-xpx7-ffpw"
}
],
"release_date": "2025-12-04T22:04:41.637000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token"
},
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2025-69223",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-06T20:01:19.831548+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427456"
}
],
"notes": [
{
"category": "description",
"text": "A decompression based denial of service flaw has been discovered in the AIOHTTP python library. Library versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host\u0027s memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aiohttp: AIOHTTP\u0027s HTTP Parser auto_decompress feature is vulnerable to zip bomb",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69223"
},
{
"category": "external",
"summary": "RHBZ#2427456",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427456"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69223",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69223"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69223",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69223"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/commit/2b920c39002cee0ec5b402581779bbaaf7c9138a",
"url": "https://github.com/aio-libs/aiohttp/commit/2b920c39002cee0ec5b402581779bbaaf7c9138a"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6mq8-rvhq-8wgg",
"url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6mq8-rvhq-8wgg"
}
],
"release_date": "2026-01-05T22:00:17.715000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "aiohttp: AIOHTTP\u0027s HTTP Parser auto_decompress feature is vulnerable to zip bomb"
},
{
"cve": "CVE-2025-69227",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-01-06T00:01:17.036900+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427256"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in aiohttp, an asynchronous HTTP client/server framework for Python. A remote attacker could exploit this vulnerability by sending a specially crafted POST request to an application using the Request.post() method, provided that Python optimizations are enabled. This could lead to an infinite loop, resulting in a Denial of Service (DoS) attack, making the affected application unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aiohttp: aiohttp: Denial of Service via specially crafted POST request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Moderate for Red Hat products as it can lead to a Denial of Service (DoS) in applications utilizing the `aiohttp` library. Exploitation requires Python optimizations to be explicitly enabled (e.g., via `-O` or `PYTHONOPTIMIZE=1`) and the application to process POST requests using the `Request.post()` method. Red Hat products are affected if they meet these specific configuration and usage criteria.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69227"
},
{
"category": "external",
"summary": "RHBZ#2427256",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427256"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69227",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69227"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69227",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69227"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/commit/bc1319ec3cbff9438a758951a30907b072561259",
"url": "https://github.com/aio-libs/aiohttp/commit/bc1319ec3cbff9438a758951a30907b072561259"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-jj3x-wxrx-4x23",
"url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-jj3x-wxrx-4x23"
}
],
"release_date": "2026-01-05T23:19:31.396000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "aiohttp: aiohttp: Denial of Service via specially crafted POST request"
},
{
"cve": "CVE-2025-69228",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-06T00:01:02.119065+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427254"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in aiohttp. A remote attacker can craft a malicious request that, when processed by an aiohttp server using the `Request.post()` method, causes the server\u0027s memory to fill uncontrollably. This can lead to a Denial of Service (DoS) by freezing the server, making it unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aiohttp: aiohttp: Denial of Service via memory exhaustion from crafted POST request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Moderate for Red Hat products. A flaw in aiohttp allows a remote attacker to cause a Denial of Service (DoS) by sending a specially crafted POST request to an aiohttp server that utilizes the `Request.post()` method. This can lead to uncontrolled memory consumption, freezing the server and making the server unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69228"
},
{
"category": "external",
"summary": "RHBZ#2427254",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427254"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69228",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69228"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69228",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69228"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/commit/b7dbd35375aedbcd712cbae8ad513d56d11cce60",
"url": "https://github.com/aio-libs/aiohttp/commit/b7dbd35375aedbcd712cbae8ad513d56d11cce60"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6jhg-hg63-jvvf",
"url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6jhg-hg63-jvvf"
}
],
"release_date": "2026-01-05T23:30:33.440000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "aiohttp: aiohttp: Denial of Service via memory exhaustion from crafted POST request"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-6322",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-05-05T11:01:00.332189+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI\u0027s intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the `fast-uri` library allows an attacker to bypass security controls in Red Hat products that process Uniform Resource Identifiers (URIs). By crafting a malicious URI with percent-encoded authority delimiters, an attacker can cause the library to incorrectly interpret the URI\u0027s authority, potentially redirecting applications to an unintended domain. This could lead to a bypass of host allowlist checks, redirect validation, or outbound request routing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "RHBZ#2466684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6322"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc"
}
],
"release_date": "2026-05-05T10:29:16.378000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling"
},
{
"cve": "CVE-2026-9277",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-05-22T14:01:14.427751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480741"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "RHBZ#2480741",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480741"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9277",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9277"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote",
"url": "https://github.com/ljharb/shell-quote"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/commit/1518179",
"url": "https://github.com/ljharb/shell-quote/commit/1518179"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p",
"url": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/shell-quote",
"url": "https://www.npmjs.com/package/shell-quote"
}
],
"release_date": "2026-05-22T13:22:38.873000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators"
},
{
"cve": "CVE-2026-9595",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-06-15T16:01:15.427658+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488934"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in webpack-dev-server. When a user configures a proxy with a broad context, such as \u0027/\u0027, and enables WebSocket (ws: true) forwarding, the development server\u0027s own Hot Module Replacement (HMR) WebSocket can be intercepted. This interception leads to the leakage of the browser\u0027s cookies and Origin header to the proxy target, bypassing the server\u0027s Host/Origin validation. Additionally, it can corrupt the HMR socket, resulting in a denial of service for the HMR functionality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webpack-dev-server: webpack-dev-server: Information disclosure and denial of service via improper proxy configuration",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9595"
},
{
"category": "external",
"summary": "RHBZ#2488934",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488934"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9595"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/facebook/create-react-app/pull/7444",
"url": "https://github.com/facebook/create-react-app/pull/7444"
},
{
"category": "external",
"summary": "https://github.com/vuejs/vue-cli/commit/72ba7505aff2a8314e82aa5082379a77504a1fcb",
"url": "https://github.com/vuejs/vue-cli/commit/72ba7505aff2a8314e82aa5082379a77504a1fcb"
},
{
"category": "external",
"summary": "https://github.com/webpack/webpack-dev-server/pull/4316",
"url": "https://github.com/webpack/webpack-dev-server/pull/4316"
},
{
"category": "external",
"summary": "https://github.com/webpack/webpack-dev-server/security/advisories/GHSA-mx8g-39q3-5c79",
"url": "https://github.com/webpack/webpack-dev-server/security/advisories/GHSA-mx8g-39q3-5c79"
}
],
"release_date": "2026-06-15T15:00:21.488000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "To mitigate this issue, users should avoid configuring `webpack-dev-server` with a broad proxy context (e.g., `/`) when WebSocket forwarding (`ws: true`) is enabled. Instead, define specific paths for the proxy context. Alternatively, disable WebSocket forwarding by omitting `ws: true` from the proxy entry if WebSocket functionality is not required for the proxy target. This configuration change may require restarting the `webpack-dev-server` instance to take effect.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webpack-dev-server: webpack-dev-server: Information disclosure and denial of service via improper proxy configuration"
},
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"cve": "CVE-2026-13149",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-30T10:00:59.843854+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494813"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in brace-expansion, a widely-used npm package for expanding brace sequences. The expand() function exhibits exponential-time complexity when processing consecutive non-expanding brace groups. An attacker who can supply crafted input to expand(), directly or transitively via minimatch or glob, can cause significant CPU consumption and event-loop blocking, resulting in denial of service. The max option does not mitigate this issue, as it bounds the output size rather than the recursion work.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13149"
},
{
"category": "external",
"summary": "RHBZ#2494813",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494813"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13149",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13149"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754",
"url": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/brace-expansion",
"url": "https://www.npmjs.com/package/brace-expansion"
}
],
"release_date": "2026-06-30T08:30:34.502000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "There is no practical mitigation for this vulnerability. The brace-expansion package is typically a transitive dependency pulled in via minimatch and glob, making it difficult to isolate. Users should upgrade to a fixed version of brace-expansion when one becomes available.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity"
},
{
"cve": "CVE-2026-13676",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-06-29T14:01:55.592330+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494197"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in `fast-uri` allows a remote attacker to bypass host-based security policies. Applications that rely on `fast-uri` for URL parsing and policy enforcement, such as denylists or redirect validations, can be circumvented due to inconsistent handling of Unicode hostnames. This discrepancy between `fast-uri` and other URL parsers could lead to unauthorized resource access or malicious redirects in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "RHBZ#2494197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13676",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13676"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6"
}
],
"release_date": "2026-06-29T13:22:44.674000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization"
},
{
"cve": "CVE-2026-21441",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-01-07T23:01:59.422078+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427726"
}
],
"notes": [
{
"category": "description",
"text": "urllib3 is an HTTP client library for Python. urllib3\u0027s streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-21441"
},
{
"category": "external",
"summary": "RHBZ#2427726",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427726"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-21441",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21441"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b",
"url": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99"
}
],
"release_date": "2026-01-07T22:09:01.936000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)"
},
{
"cve": "CVE-2026-22029",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-01-10T04:01:03.694749+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2428412"
}
],
"notes": [
{
"category": "description",
"text": "A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-22029"
},
{
"category": "external",
"summary": "RHBZ#2428412",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2428412"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-22029",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22029"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-22029",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22029"
},
{
"category": "external",
"summary": "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx",
"url": "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx"
}
],
"release_date": "2026-01-10T02:42:32.736000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects"
},
{
"cve": "CVE-2026-23490",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-16T20:03:33.790513+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2430472"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pyasn1, a generic ASN.1 library for Python. A remote attacker could exploit this vulnerability by sending a specially crafted RELATIVE-OID with excessive continuation octets. This input validation vulnerability leads to memory exhaustion, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-23490"
},
{
"category": "external",
"summary": "RHBZ#2430472",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430472"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-23490",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23490"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23490",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23490"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970",
"url": "https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2",
"url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq"
}
],
"release_date": "2026-01-16T19:03:36.442000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID"
},
{
"cve": "CVE-2026-23745",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-01-16T23:01:26.508727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2430538"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the node-tar library. This vulnerability allows an attacker to craft malicious archives that, when extracted, can bypass intended security restrictions. This leads to arbitrary file overwrite and symlink poisoning, potentially allowing unauthorized modification of files on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products that utilize the node-tar library. The flaw allows an attacker to perform arbitrary file overwrite and symlink poisoning by crafting malicious tar archives. This occurs due to insufficient path sanitization of hardlink and symbolic link entries, even when the default secure behavior (preservePaths is false) is enabled.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-23745"
},
{
"category": "external",
"summary": "RHBZ#2430538",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430538"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-23745",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23745"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23745",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23745"
},
{
"category": "external",
"summary": "https://github.com/isaacs/node-tar/commit/340eb285b6d986e91969a1170d7fe9b0face405e",
"url": "https://github.com/isaacs/node-tar/commit/340eb285b6d986e91969a1170d7fe9b0face405e"
},
{
"category": "external",
"summary": "https://github.com/isaacs/node-tar/security/advisories/GHSA-8qq5-rm4j-mr97",
"url": "https://github.com/isaacs/node-tar/security/advisories/GHSA-8qq5-rm4j-mr97"
}
],
"release_date": "2026-01-16T22:00:08.769000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-30922",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-03-18T04:02:45.401296+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448553"
}
],
"notes": [
{
"category": "description",
"text": "An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-30922"
},
{
"category": "external",
"summary": "RHBZ#2448553",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448553"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-30922",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-30922"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",
"url": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r"
}
],
"release_date": "2026-03-18T02:29:45.857000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32283",
"cwe": {
"id": "CWE-764",
"name": "Multiple Locks of a Critical Resource"
},
"discovery_date": "2026-04-08T02:01:16.213799+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456338"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in the Go `crypto/tls` package allows a remote attacker to cause a denial of service in applications using TLS 1.3. By sending multiple key update messages in a single record post-handshake, an attacker can trigger a connection deadlock, leading to uncontrolled resource consumption. This impacts Red Hat products utilizing the affected Go standard library for TLS 1.3 connections.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "RHBZ#2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://go.dev/cl/763767",
"url": "https://go.dev/cl/763767"
},
{
"category": "external",
"summary": "https://go.dev/issue/78334",
"url": "https://go.dev/issue/78334"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4870",
"url": "https://pkg.go.dev/vuln/GO-2026-4870"
}
],
"release_date": "2026-04-08T01:06:57.670000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-40895",
"cwe": {
"id": "CWE-212",
"name": "Improper Removal of Sensitive Information Before Storage or Transfer"
},
"discovery_date": "2026-04-21T21:02:33.280553+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2460297"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in follow-redirects. When an HTTP request follows a cross-domain redirect (a redirection to a different domain), custom authentication headers, such as X-API-Key or X-Auth-Token, are not properly stripped. This allows these sensitive headers to be forwarded verbatim to the redirect target, potentially leading to the unintended disclosure of authentication information to an untrusted third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "follow-redirects: follow-redirects: Information disclosure via cross-domain redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40895"
},
{
"category": "external",
"summary": "RHBZ#2460297",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460297"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40895",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40895"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40895",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40895"
},
{
"category": "external",
"summary": "https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-r4q5-vmmm-2653",
"url": "https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-r4q5-vmmm-2653"
}
],
"release_date": "2026-04-21T19:59:59.759000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "follow-redirects: follow-redirects: Information disclosure via cross-domain redirects"
},
{
"cve": "CVE-2026-42264",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-05-08T04:02:21.039378+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467927"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as prototype pollution, allows an attacker to inject malicious properties into core JavaScript objects. When another component in the same application environment is compromised and pollutes the system\u0027s object prototype, Axios can unknowingly use these manipulated values in its outbound network requests. This could lead to the disclosure of sensitive information or the alteration of network communications, compromising data confidentiality and integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Prototype pollution allows information disclosure and request manipulation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important prototype pollution flaw in Axios could result in information disclosure and network request manipulation. The vulnerability occurs when a co-located dependency in the application environment successfully pollutes the JavaScript `Object.prototype`. Under these conditions, Axios may unknowingly incorporate the manipulated properties into its outbound HTTP requests, potentially compromising data confidentiality and integrity. Exploitation is contingent on a prior successful prototype pollution attack from another component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42264"
},
{
"category": "external",
"summary": "RHBZ#2467927",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467927"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42264",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42264"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42264",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42264"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/47915144662f2733e6c051bdcb895a8c8f0586aa",
"url": "https://github.com/axios/axios/commit/47915144662f2733e6c051bdcb895a8c8f0586aa"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10779",
"url": "https://github.com/axios/axios/pull/10779"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.2",
"url": "https://github.com/axios/axios/releases/tag/v1.15.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-q8qp-cvcw-x6jj",
"url": "https://github.com/axios/axios/security/advisories/GHSA-q8qp-cvcw-x6jj"
}
],
"release_date": "2026-05-08T03:20:24.248000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Prototype pollution allows information disclosure and request manipulation"
},
{
"cve": "CVE-2026-42338",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-12T21:01:14.436876+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2476810"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in the `ip-address` JavaScript library is rated as Important. It allows for cross-site scripting (XSS) when an application processes untrusted input through the `Address6` constructor and subsequently renders the unescaped output of methods like `Address6.group()`, `Address6.link()`, or `AddressError.parseMessage` directly as HTML. While the library itself is affected, exploitation is contingent on specific application-level rendering practices that may not be common in Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42338"
},
{
"category": "external",
"summary": "RHBZ#2476810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476810"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42338",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42338"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338"
},
{
"category": "external",
"summary": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g",
"url": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g"
}
],
"release_date": "2026-05-12T19:43:16.470000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
},
{
"cve": "CVE-2026-45736",
"cwe": {
"id": "CWE-824",
"name": "Access of Uninitialized Pointer"
},
"discovery_date": "2026-05-15T16:00:55.786944+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477914"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in the `ws` WebSocket library for Node.js could lead to sensitive information disclosure. The flaw occurs when a `TypedArray` is specifically provided as the `reason` argument to the `websocket.close()` function, potentially exposing uninitialized memory. Red Hat products utilizing this library may be affected if their implementations allow for such a crafted `close()` call.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "RHBZ#2477914",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477914"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45736",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45736"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086",
"url": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx"
}
],
"release_date": "2026-05-15T14:53:57.263000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`"
},
{
"cve": "CVE-2026-45822",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-30T09:01:06.468966+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494807"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "decode-uri-component: decode-uri-component: Denial of Service via crafted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A denial of service flaw was found in the decode-uri-component npm package. The decode() function exhibits super-linear time complexity when processing input containing many percent-encoded sequences, allowing an attacker to cause significant CPU consumption and event-loop blocking. In Red Hat products where this package is bundled (OpenShift Console, Quay, Pipelines, RHOAI, and others), exploitation requires that attacker-controlled input containing crafted percent-encoded strings reaches the decode() function without prior length validation. Red Hat rates this as Moderate severity since the impact is limited to availability with no confidentiality or integrity impact, consistent with the CNA\u0027s CVSS 4.0 assessment of 6.6 Medium.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "RHBZ#2494807",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494807"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js",
"url": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005",
"url": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/decode-uri-component",
"url": "https://www.npmjs.com/package/decode-uri-component"
}
],
"release_date": "2026-06-30T08:05:36.399000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Validate and limit the length of any user-controlled input before passing it to decode-uri-component\u0027s decode() function. Inputs containing more than approximately 200 percent-encoded tokens (e.g. \u0027%ab\u0027 sequences) can trigger noticeable delays. Reject or truncate URI components exceeding a reasonable length threshold before decoding. A fix exists in the upstream repository (commit fa479daf) but has not yet been included in an npm release.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "decode-uri-component: decode-uri-component: Denial of Service via crafted input"
},
{
"cve": "CVE-2026-48779",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-16T22:01:24.571224+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489661"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `ws` WebSocket library. A remote attacker can exploit this flaw by sending a high volume of small, fragmented data, leading to excessive memory consumption and subsequent process termination. This can result in service disruption for Red Hat products that utilize `ws` for WebSocket communication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "RHBZ#2489661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48779"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7",
"url": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53",
"url": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94",
"url": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8",
"url": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p"
}
],
"release_date": "2026-06-16T21:26:22.537000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments"
}
]
}
RHSA-2026:41941
Vulnerability from csaf_redhat - Published: 2026-07-20 09:38 - Updated: 2026-08-10 23:45Summary
Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.18.25 security, enhancement & bug fix update
Severity
Important
Notes
Topic: Red Hat OpenShift Data Foundation 4.18.25 security, enhancement & bug fix update
Details: Red Hat OpenShift Data Foundation 4.18.25 security, enhancement & bug fix update
FIXED BUGS:
==========
DFBUGS-7343: RHODF 4.18.25 release
DFBUGS-7010: [GSS] kube-rbac-proxy in OCS metrics exporter logging full bearer tokens
DFBUGS-6941: [4.18.z] Integrate ibm-storage-odf-operator 1.9.0
DFBUGS-6821: [GSS] noobaa DB grows with errors BlockStoreAzure _delete_blocks failed for block
DFBUGS-6524: CLONE 4.18 - [UI] Resource profile calculations doesn't include NFS
DFBUGS-6462: Backport to odf-4.18.z [RDR] Partial s3StoreProfile missing in ramen-hub-operator-config after upgrading hub from ODF 4.17 to 4.18
DFBUGS-6406: [Backport to odf-4.18.z] Fail upgrade Provider with client cluster. ocs-operator csv stuck in pending
DFBUGS-6178: Backport to odf-4.18.z Noobaa POD keeps Failing when Clusterwide encryption is enabled with IBM KeyProtect on ROKS Cluster
DFBUGS-4848: [Backport to odf-4.18.z] [GSS] Noobaa certificate verification for NamespaceStore endpoints
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in node-forge. This vulnerability allows unauthenticated attackers to bypass downstream cryptographic verifications and security decisions via crafting ASN.1 (Abstract Syntax Notation One) structures to desynchronize schema validations, yielding a semantic divergence.
8.7 (High)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.
8.2 (High)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in qs, a module used for parsing query strings. A remote attacker can exploit an improper input validation vulnerability by sending specially crafted HTTP requests that use bracket notation (e.g., `a[]=value`). This bypasses the `arrayLimit` option, which is designed to limit the size of parsed arrays and prevent resource exhaustion. Successful exploitation can lead to memory exhaustion, causing a Denial of Service (DoS) where the application crashes or becomes unresponsive, making the service unavailable to users.
7.5 (High)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in database/sql. Concurrent queries can produce unexpected results when a query is cancelled during a Scan method call on returned Rows, creating a race condition. This vulnerability allows an attacker who can initiate and cancel queries to trigger this condition, possibly leading to inconsistent data being returned to the application.
7.0 (High)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Threats
Impact
Moderate
A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go program to try to allocate a large amount of memory, causing an out-of-memory condition and resulting in a denial of service.
7.5 (High)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Threats
Impact
Important
An ASN.1 Denial of Service (Dos) vulnerability exists in the node-forge asn1.fromDer function within forge/lib/asn1.js. The ASN.1 DER parser implementation (_fromDer) recurses for every constructed ASN.1 value (SEQUENCE, SET, etc.) and lacks a guard limiting recursion depth. An attacker can craft a small DER blob containing a very large nesting depth of constructed TLVs which causes the Node.js V8 engine to exhaust its call stack and throw RangeError: Maximum call stack size exceeded, crashing or incapacitating the process handling the parse. This is a remote, low-cost Denial-of-Service against applications that parse untrusted ASN.1 objects.
5.3 (Medium)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Workaround
|
Threats
Impact
Moderate
An SSRF flaw has been discovered in Webpack. When experiments.buildHttp is enabled, webpack’s HTTP(S) resolver (HttpUriPlugin) enforces allowedUris only for the initial URL, but does not re-validate allowedUris after following HTTP 30x redirects. As a result, an import that appears restricted to a trusted allow-list can be redirected to HTTP(S) URLs outside the allow-list. This is a policy/allow-list bypass that enables build-time SSRF behavior (requests from the build machine to internal-only endpoints, depending on network access) and untrusted content inclusion in build outputs (redirected content is treated as module source and bundled).
CWE-918 - Server-Side Request Forgery (SSRF)Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Workaround
|
Threats
Impact
Low
An SSRF flaw has been discovered in Webpack. When experiments.buildHttp is enabled, webpack’s HTTP(S) resolver (HttpUriPlugin) can be bypassed to fetch resources from hosts outside allowedUris by using crafted URLs that include userinfo (username:password@host). If allowedUris enforcement relies on a raw string prefix check (e.g., uri.startsWith(allowed)), a URL that looks allow-listed can pass validation while the actual network request is sent to a different authority/host after URL parsing. This is a policy/allow-list bypass that enables build-time SSRF behavior (outbound requests from the build machine to internal-only endpoints, depending on network access) and untrusted content inclusion (the fetched response is treated as module source and bundled).
CWE-918 - Server-Side Request Forgery (SSRF)Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Workaround
|
Threats
Impact
Low
A flaw was found in ajv. When the $data option is enabled, the value of the pattern keyword is passed directly to the JavaScript RegExp() constructor without sufficient validation. An attacker able to supply a malicious regular expression pattern can trigger a ReDoS (Regular Expression Denial of Service), causing the application to become unresponsive and resulting in a denial of service.
7.5 (High)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by providing a specially crafted XML input. The system incorrectly interprets a dot in a DOCTYPE entity name as a regular expression wildcard during processing. This allows the attacker to bypass security measures and inject malicious scripts, resulting in Cross-Site Scripting (XSS) when the parsed output is displayed to users.
7.1 (High)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Workaround
|
Threats
Impact
Important
A denial of service flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by providing a specially crafted, small XML input. This input can force the XML parser to perform an unlimited amount of entity expansion, consuming excessive resources. This can lead to the application freezing for an extended period, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in minimatch. A remote attacker could exploit this Regular Expression Denial of Service (ReDoS) vulnerability by providing a specially crafted glob pattern. This pattern, containing numerous consecutive wildcard characters, causes excessive processing and exponential backtracking in the regular expression engine. Successful exploitation leads to a Denial of Service (DoS), making the application unresponsive.
6.5 (Medium)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Threats
Impact
Moderate
A flaw was found in minimatch. A remote attacker could exploit this vulnerability by providing a specially crafted glob expression with nested unbounded quantifiers. This could lead to catastrophic backtracking in the V8 JavaScript engine, causing the application to become unresponsive and resulting in a Denial of Service (DoS).
6.5 (Medium)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Threats
Impact
Moderate
A flaw was found in fast-xml-parser. A user can exploit this flaw by processing specially crafted XML data with the XML builder when the `preserveOrder` option is enabled. This can lead to a stack overflow, causing the application to crash and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Threats
Impact
Important
A flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by supplying specially crafted XML input containing numeric character references or standard XML entities. This input can bypass configured entity expansion limits, leading to excessive memory allocation and high CPU usage. The primary consequence is a Denial of Service (DoS), which can crash the affected process.
7.5 (High)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.
7.5 (High)
Affected products
Fixed
68 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 | — |
Workaround
|
Threats
Impact
Important
References
174 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Data Foundation 4.18.25 security, enhancement \u0026 bug fix update",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Data Foundation 4.18.25 security, enhancement \u0026 bug fix update\n\nFIXED BUGS:\n==========\nDFBUGS-7343: RHODF 4.18.25 release\nDFBUGS-7010: [GSS] kube-rbac-proxy in OCS metrics exporter logging full bearer tokens\nDFBUGS-6941: [4.18.z] Integrate ibm-storage-odf-operator 1.9.0\nDFBUGS-6821: [GSS] noobaa DB grows with errors BlockStoreAzure _delete_blocks failed for block\nDFBUGS-6524: CLONE 4.18 - [UI] Resource profile calculations doesn\u0027t include NFS\nDFBUGS-6462: Backport to odf-4.18.z [RDR] Partial s3StoreProfile missing in ramen-hub-operator-config after upgrading hub from ODF 4.17 to 4.18\nDFBUGS-6406: [Backport to odf-4.18.z] Fail upgrade Provider with client cluster. ocs-operator csv stuck in pending\nDFBUGS-6178: Backport to odf-4.18.z Noobaa POD keeps Failing when Clusterwide encryption is enabled with IBM KeyProtect on ROKS Cluster\nDFBUGS-4848: [Backport to odf-4.18.z] [GSS] Noobaa certificate verification for NamespaceStore endpoints",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:41941",
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-12816",
"url": "https://access.redhat.com/security/cve/CVE-2025-12816"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-13465",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-15284",
"url": "https://access.redhat.com/security/cve/CVE-2025-15284"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-47907",
"url": "https://access.redhat.com/security/cve/CVE-2025-47907"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58183",
"url": "https://access.redhat.com/security/cve/CVE-2025-58183"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61726",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61729",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66031",
"url": "https://access.redhat.com/security/cve/CVE-2025-66031"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68157",
"url": "https://access.redhat.com/security/cve/CVE-2025-68157"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68458",
"url": "https://access.redhat.com/security/cve/CVE-2025-68458"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69873",
"url": "https://access.redhat.com/security/cve/CVE-2025-69873"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25896",
"url": "https://access.redhat.com/security/cve/CVE-2026-25896"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-26278",
"url": "https://access.redhat.com/security/cve/CVE-2026-26278"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-26996",
"url": "https://access.redhat.com/security/cve/CVE-2026-26996"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27904",
"url": "https://access.redhat.com/security/cve/CVE-2026-27904"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27942",
"url": "https://access.redhat.com/security/cve/CVE-2026-27942"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33036",
"url": "https://access.redhat.com/security/cve/CVE-2026-33036"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48779",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/",
"url": "https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41941.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.18.25 security, enhancement \u0026 bug fix update",
"tracking": {
"current_release_date": "2026-08-10T23:45:07+00:00",
"generator": {
"date": "2026-08-10T23:45:07+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHSA-2026:41941",
"initial_release_date": "2026-07-20T09:38:34+00:00",
"revision_history": [
{
"date": "2026-07-20T09:38:34+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-10T23:45:07+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Openshift Data Foundation 4.18",
"product": {
"name": "Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Openshift Data Foundation"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9@sha256%3A6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad?arch=amd64\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9\u0026tag=1783676191"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9-operator@sha256%3A420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96?arch=amd64\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9-operator\u0026tag=1783929816"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"product_id": "registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-operator-bundle@sha256%3Ac291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6?arch=amd64\u0026repository_url=registry.redhat.io/odf4/cephcsi-operator-bundle\u0026tag=1784096750"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"product": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"product_id": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mcg-core-rhel9@sha256%3Ab60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291?arch=amd64\u0026repository_url=registry.redhat.io/odf4/mcg-core-rhel9\u0026tag=1784094353"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"product": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"product_id": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mcg-rhel9-operator@sha256%3A607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae?arch=amd64\u0026repository_url=registry.redhat.io/odf4/mcg-rhel9-operator\u0026tag=1784093953"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"product": {
"name": "registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"product_id": "registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mcg-operator-bundle@sha256%3A0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607?arch=amd64\u0026repository_url=registry.redhat.io/odf4/mcg-operator-bundle\u0026tag=1784096858"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"product_id": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-console-rhel9@sha256%3A45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba?arch=amd64\u0026repository_url=registry.redhat.io/odf4/ocs-client-console-rhel9\u0026tag=1784094943"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"product_id": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-rhel9-operator@sha256%3A51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799?arch=amd64\u0026repository_url=registry.redhat.io/odf4/ocs-client-rhel9-operator\u0026tag=1783676585"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"product_id": "registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-operator-bundle@sha256%3Ab510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de?arch=amd64\u0026repository_url=registry.redhat.io/odf4/ocs-client-operator-bundle\u0026tag=1784097043"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"product": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"product_id": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-metrics-exporter-rhel9@sha256%3A1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c?arch=amd64\u0026repository_url=registry.redhat.io/odf4/ocs-metrics-exporter-rhel9\u0026tag=1783676649"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"product": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"product_id": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-rhel9-operator@sha256%3A0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d?arch=amd64\u0026repository_url=registry.redhat.io/odf4/ocs-rhel9-operator\u0026tag=1783676675"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"product": {
"name": "registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"product_id": "registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-operator-bundle@sha256%3A2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406?arch=amd64\u0026repository_url=registry.redhat.io/odf4/ocs-operator-bundle\u0026tag=1784097072"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"product_id": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-cli-rhel9@sha256%3A8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-cli-rhel9\u0026tag=1784094299"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"product_id": "registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-console-rhel9@sha256%3Afb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-console-rhel9\u0026tag=1784094725"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"product_id": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-cosi-sidecar-rhel9@sha256%3Ad36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-cosi-sidecar-rhel9\u0026tag=1783676820"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-rhel9-operator@sha256%3A637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-rhel9-operator\u0026tag=1783676883"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-operator-bundle@sha256%3A30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-operator-bundle\u0026tag=1784097114"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-sidecar-rhel9@sha256%3A8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9\u0026tag=1783676894"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"product_id": "registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-dependencies-operator-bundle@sha256%3Aa849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-dependencies-operator-bundle\u0026tag=1784097121"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"product_id": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-console-rhel9@sha256%3Af476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-console-rhel9\u0026tag=1784095175"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"product_id": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-rhel9-operator@sha256%3A86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-rhel9-operator\u0026tag=1783676977"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"product_id": "registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-operator-bundle@sha256%3Ad1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-operator-bundle\u0026tag=1784097210"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"product_id": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-must-gather-rhel9@sha256%3A8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-must-gather-rhel9\u0026tag=1784093503"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"product_id": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-rhel9-operator@sha256%3Aacf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-rhel9-operator\u0026tag=1783677297"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"product_id": "registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-operator-bundle@sha256%3Ad5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-operator-bundle\u0026tag=1784097342"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"product_id": "registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-prometheus-operator-bundle@sha256%3A98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-prometheus-operator-bundle\u0026tag=1784097330"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"product": {
"name": "registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"product_id": "registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odr-cluster-operator-bundle@sha256%3A2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odr-cluster-operator-bundle\u0026tag=1784097240"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"product": {
"name": "registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"product_id": "registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odr-hub-operator-bundle@sha256%3A7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odr-hub-operator-bundle\u0026tag=1784097501"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"product": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"product_id": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odr-rhel9-operator@sha256%3A26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odr-rhel9-operator\u0026tag=1783677345"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"product": {
"name": "registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"product_id": "registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odr-recipe-operator-bundle@sha256%3Aa7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odr-recipe-operator-bundle\u0026tag=1784097684"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"product": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"product_id": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rook-ceph-rhel9-operator@sha256%3A3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b?arch=amd64\u0026repository_url=registry.redhat.io/odf4/rook-ceph-rhel9-operator\u0026tag=1783677533"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"product": {
"name": "registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"product_id": "registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rook-ceph-operator-bundle@sha256%3A34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0?arch=amd64\u0026repository_url=registry.redhat.io/odf4/rook-ceph-operator-bundle\u0026tag=1784098364"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9@sha256%3A468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9\u0026tag=1783676191"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9-operator@sha256%3Ac51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9-operator\u0026tag=1783929816"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"product_id": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/mcg-core-rhel9@sha256%3A5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/mcg-core-rhel9\u0026tag=1784094353"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"product_id": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/mcg-rhel9-operator@sha256%3Aa36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/mcg-rhel9-operator\u0026tag=1784093953"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"product_id": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-console-rhel9@sha256%3Ad50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/ocs-client-console-rhel9\u0026tag=1784094943"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"product_id": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-rhel9-operator@sha256%3Ad8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/ocs-client-rhel9-operator\u0026tag=1783676585"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"product_id": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ocs-metrics-exporter-rhel9@sha256%3A54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/ocs-metrics-exporter-rhel9\u0026tag=1783676649"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"product_id": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ocs-rhel9-operator@sha256%3Aaa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/ocs-rhel9-operator\u0026tag=1783676675"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-cli-rhel9@sha256%3Ad7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-cli-rhel9\u0026tag=1784094299"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-console-rhel9@sha256%3A59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-console-rhel9\u0026tag=1784094725"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-cosi-sidecar-rhel9@sha256%3A9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-cosi-sidecar-rhel9\u0026tag=1783676820"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-rhel9-operator@sha256%3A036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-rhel9-operator\u0026tag=1783676883"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-sidecar-rhel9@sha256%3A4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9\u0026tag=1783676894"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-console-rhel9@sha256%3Af32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-console-rhel9\u0026tag=1784095175"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-rhel9-operator@sha256%3A88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-rhel9-operator\u0026tag=1783676977"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-must-gather-rhel9@sha256%3Adb1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-must-gather-rhel9\u0026tag=1784093503"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-rhel9-operator@sha256%3Ad713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-rhel9-operator\u0026tag=1783677297"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"product_id": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odr-rhel9-operator@sha256%3A2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odr-rhel9-operator\u0026tag=1783677345"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"product_id": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rook-ceph-rhel9-operator@sha256%3A6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/rook-ceph-rhel9-operator\u0026tag=1783677533"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9@sha256%3Ada2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661?arch=s390x\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9\u0026tag=1783676191"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9-operator@sha256%3Ac2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5?arch=s390x\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9-operator\u0026tag=1783929816"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"product": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"product_id": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/mcg-core-rhel9@sha256%3A26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5?arch=s390x\u0026repository_url=registry.redhat.io/odf4/mcg-core-rhel9\u0026tag=1784094353"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"product": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"product_id": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"product_identification_helper": {
"purl": "pkg:oci/mcg-rhel9-operator@sha256%3Adc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884?arch=s390x\u0026repository_url=registry.redhat.io/odf4/mcg-rhel9-operator\u0026tag=1784093953"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"product_id": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-console-rhel9@sha256%3Af599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0?arch=s390x\u0026repository_url=registry.redhat.io/odf4/ocs-client-console-rhel9\u0026tag=1784094943"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"product_id": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-rhel9-operator@sha256%3A69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246?arch=s390x\u0026repository_url=registry.redhat.io/odf4/ocs-client-rhel9-operator\u0026tag=1783676585"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"product": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"product_id": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ocs-metrics-exporter-rhel9@sha256%3A0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae?arch=s390x\u0026repository_url=registry.redhat.io/odf4/ocs-metrics-exporter-rhel9\u0026tag=1783676649"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"product": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"product_id": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ocs-rhel9-operator@sha256%3A3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4?arch=s390x\u0026repository_url=registry.redhat.io/odf4/ocs-rhel9-operator\u0026tag=1783676675"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"product_id": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-cli-rhel9@sha256%3A3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-cli-rhel9\u0026tag=1784094299"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"product_id": "registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-console-rhel9@sha256%3Ab02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-console-rhel9\u0026tag=1784094725"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"product_id": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-cosi-sidecar-rhel9@sha256%3A6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-cosi-sidecar-rhel9\u0026tag=1783676820"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-rhel9-operator@sha256%3A22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-rhel9-operator\u0026tag=1783676883"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-sidecar-rhel9@sha256%3Ab07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9\u0026tag=1783676894"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"product_id": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-console-rhel9@sha256%3Afdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-console-rhel9\u0026tag=1784095175"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"product_id": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-rhel9-operator@sha256%3A4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-rhel9-operator\u0026tag=1783676977"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"product_id": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-must-gather-rhel9@sha256%3A80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-must-gather-rhel9\u0026tag=1784093503"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"product_id": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-rhel9-operator@sha256%3Acb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-rhel9-operator\u0026tag=1783677297"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"product": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"product_id": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odr-rhel9-operator@sha256%3A1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odr-rhel9-operator\u0026tag=1783677345"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x",
"product": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x",
"product_id": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rook-ceph-rhel9-operator@sha256%3Ac181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404?arch=s390x\u0026repository_url=registry.redhat.io/odf4/rook-ceph-rhel9-operator\u0026tag=1783677533"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9-operator@sha256%3A47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d?arch=arm64\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9-operator\u0026tag=1783929816"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"product": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"product_id": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"product_identification_helper": {
"purl": "pkg:oci/mcg-rhel9-operator@sha256%3Aeb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0?arch=arm64\u0026repository_url=registry.redhat.io/odf4/mcg-rhel9-operator\u0026tag=1784093953"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"product_id": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-rhel9-operator@sha256%3A71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4?arch=arm64\u0026repository_url=registry.redhat.io/odf4/ocs-client-rhel9-operator\u0026tag=1783676585"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"product": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"product_id": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-rhel9-operator@sha256%3A846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1?arch=arm64\u0026repository_url=registry.redhat.io/odf4/ocs-rhel9-operator\u0026tag=1783676675"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"product_id": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-cli-rhel9@sha256%3Ab758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-cli-rhel9\u0026tag=1784094299"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-rhel9-operator@sha256%3Aa0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-rhel9-operator\u0026tag=1783676883"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-sidecar-rhel9@sha256%3Ad87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9\u0026tag=1783676894"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"product_id": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-rhel9-operator@sha256%3A77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-rhel9-operator\u0026tag=1783676977"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"product_id": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-must-gather-rhel9@sha256%3Aca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-must-gather-rhel9\u0026tag=1784093503"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"product_id": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-rhel9-operator@sha256%3A01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-rhel9-operator\u0026tag=1783677297"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"product": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"product_id": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odr-rhel9-operator@sha256%3Ad5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odr-rhel9-operator\u0026tag=1783677345"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x"
},
"product_reference": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64"
},
"product_reference": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64"
},
"product_reference": "registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64"
},
"product_reference": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x"
},
"product_reference": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64"
},
"product_reference": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x"
},
"product_reference": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64"
},
"product_reference": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64"
},
"product_reference": "registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64"
},
"product_reference": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x"
},
"product_reference": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64"
},
"product_reference": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64"
},
"product_reference": "registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64"
},
"product_reference": "registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64"
},
"product_reference": "registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x"
},
"product_reference": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64"
},
"product_reference": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64"
},
"product_reference": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
},
"product_reference": "registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64 as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64"
},
"product_reference": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x as a component of Red Hat Openshift Data Foundation 4.18",
"product_id": "Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
},
"product_reference": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.18"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-12816",
"cwe": {
"id": "CWE-179",
"name": "Incorrect Behavior Order: Early Validation"
},
"discovery_date": "2025-11-25T20:01:05.875196+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2417097"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in node-forge. This vulnerability allows unauthenticated attackers to bypass downstream cryptographic verifications and security decisions via crafting ASN.1 (Abstract Syntax Notation One) structures to desynchronize schema validations, yielding a semantic divergence.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products due to an interpretation conflict in the node-forge library. An unauthenticated attacker could exploit this flaw by crafting malicious ASN.1 structures, leading to a bypass of cryptographic verifications and security decisions in affected applications. This impacts various Red Hat products that utilize node-forge for cryptographic operations.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-12816"
},
{
"category": "external",
"summary": "RHBZ#2417097",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2417097"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-12816",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-12816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-12816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-12816"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge",
"url": "https://github.com/digitalbazaar/forge"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/pull/1124",
"url": "https://github.com/digitalbazaar/forge/pull/1124"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq"
},
{
"category": "external",
"summary": "https://kb.cert.org/vuls/id/521113",
"url": "https://kb.cert.org/vuls/id/521113"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/node-forge",
"url": "https://www.npmjs.com/package/node-forge"
}
],
"release_date": "2025-11-25T19:15:50.243000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications"
},
{
"cve": "CVE-2025-13465",
"cwe": {
"id": "CWE-1321",
"name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)"
},
"discovery_date": "2026-01-21T20:01:28.774829+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2431740"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: prototype pollution in _.unset and _.omit functions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is only exploitable by applications using the _.unset and _.omit functions on an object and allowing user input to determine the path of the property to be removed. This issue only allows the deletion of properties but does not allow overwriting their behavior, limiting the impact to a denial of service. Due to this reason, this vulnerability has been rated with an important severity.\n\nIn Grafana, JavaScript code runs only in the browser, while the server side is all Golang. Therefore, the worst-case scenario is a loss of functionality in the client application inside the browser. To reflect this, the CVSS availability metric and the severity of the Grafana and the Grafana-PCP component have been updated to low and moderate, respectively.\n\nThe lodash dependency is bundled and used by the pcs-web-ui component of the PCS package. In Red Hat Enterprise Linux 8.10, the pcs-web-ui component is no longer included in the PCS package. As a result, RHEL 8.10 does not ship the vulnerable lodash component within PCS and is therefore not-affected by this CVE.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "RHBZ#2431740",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431740"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13465",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13465"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg",
"url": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg"
}
],
"release_date": "2026-01-21T19:05:28.846000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement strict input validation before passing any property paths to the _.unset and _.omit functions to block attempts to access the prototype chain. Ensure that strings like __proto__, constructor and prototype are blocked, for example.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: prototype pollution in _.unset and _.omit functions"
},
{
"cve": "CVE-2025-15284",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-12-29T23:00:58.541337+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2425946"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in qs, a module used for parsing query strings. A remote attacker can exploit an improper input validation vulnerability by sending specially crafted HTTP requests that use bracket notation (e.g., `a[]=value`). This bypasses the `arrayLimit` option, which is designed to limit the size of parsed arrays and prevent resource exhaustion. Successful exploitation can lead to memory exhaustion, causing a Denial of Service (DoS) where the application crashes or becomes unresponsive, making the service unavailable to users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "qs: qs: Denial of Service via improper input validation in array parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products that utilize the `qs` module for parsing query strings, particularly when processing user-controlled input with bracket notation. The `arrayLimit` option, intended to prevent resource exhaustion, is bypassed when bracket notation (`a[]=value`) is used, allowing a remote attacker to cause a denial of service through memory exhaustion. This can lead to application crashes or unresponsiveness, making the service unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-15284"
},
{
"category": "external",
"summary": "RHBZ#2425946",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2425946"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-15284",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15284"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-15284",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15284"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9",
"url": "https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p",
"url": "https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p"
}
],
"release_date": "2025-12-29T22:56:45.240000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "qs: qs: Denial of Service via improper input validation in array parsing"
},
{
"cve": "CVE-2025-47907",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"discovery_date": "2025-08-07T16:01:06.247481+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2387083"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in database/sql. Concurrent queries can produce unexpected results when a query is cancelled during a Scan method call on returned Rows, creating a race condition. This vulnerability allows an attacker who can initiate and cancel queries to trigger this condition, possibly leading to inconsistent data being returned to the application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "database/sql: Postgres Scan Race Condition",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability marked as Moderate severity issues rather than Important. The os/exec LookPath flaw requires a misconfigured PATH to be exploitable, and the database/sql race condition primarily impacts applications that cancel queries while running multiple queries concurrently. Both can cause unexpected behavior, but the exploitation scope is limited and unlikely to result in direct compromise in most typical deployments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-47907"
},
{
"category": "external",
"summary": "RHBZ#2387083",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2387083"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-47907",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47907"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-47907",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47907"
},
{
"category": "external",
"summary": "https://go.dev/cl/693735",
"url": "https://go.dev/cl/693735"
},
{
"category": "external",
"summary": "https://go.dev/issue/74831",
"url": "https://go.dev/issue/74831"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/x5MKroML2yM",
"url": "https://groups.google.com/g/golang-announce/c/x5MKroML2yM"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-3849",
"url": "https://pkg.go.dev/vuln/GO-2025-3849"
}
],
"release_date": "2025-08-07T15:25:30.704000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "database/sql: Postgres Scan Race Condition"
},
{
"cve": "CVE-2025-58183",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-10-29T23:01:50.573951+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2407258"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go program to try to allocate a large amount of memory, causing an out-of-memory condition and resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to be able to process a specially crafted GNU tar pax 1.0 archive with the application using the archive/tar package. Additionally, this issue can cause the Go application to allocate a large amount of memory, eventually leading to an out-of-memory condition and resulting in a denial of service with no other security impact. Due to these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58183"
},
{
"category": "external",
"summary": "RHBZ#2407258",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2407258"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58183",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58183"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58183",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58183"
},
{
"category": "external",
"summary": "https://go.dev/cl/709861",
"url": "https://go.dev/cl/709861"
},
{
"category": "external",
"summary": "https://go.dev/issue/75677",
"url": "https://go.dev/issue/75677"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI",
"url": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4014",
"url": "https://pkg.go.dev/vuln/GO-2025-4014"
}
],
"release_date": "2025-10-29T22:10:14.376000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map"
},
{
"cve": "CVE-2025-61726",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:42.791305+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "RHBZ#2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://go.dev/cl/736712",
"url": "https://go.dev/cl/736712"
},
{
"category": "external",
"summary": "https://go.dev/issue/77101",
"url": "https://go.dev/issue/77101"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4341",
"url": "https://pkg.go.dev/vuln/GO-2026-4341"
}
],
"release_date": "2026-01-28T19:30:31.215000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2025-66031",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"discovery_date": "2025-11-26T23:01:36.363253+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2417397"
}
],
"notes": [
{
"category": "description",
"text": "An ASN.1 Denial of Service (Dos) vulnerability exists in the node-forge asn1.fromDer function within forge/lib/asn1.js. The ASN.1 DER parser implementation (_fromDer) recurses for every constructed ASN.1 value (SEQUENCE, SET, etc.) and lacks a guard limiting recursion depth. An attacker can craft a small DER blob containing a very large nesting depth of constructed TLVs which causes the Node.js V8 engine to exhaust its call stack and throw RangeError: Maximum call stack size exceeded, crashing or incapacitating the process handling the parse. This is a remote, low-cost Denial-of-Service against applications that parse untrusted ASN.1 objects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: node-forge ASN.1 Unbounded Recursion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66031"
},
{
"category": "external",
"summary": "RHBZ#2417397",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2417397"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66031",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66031"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66031",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66031"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/commit/260425c6167a38aae038697132483b5517b26451",
"url": "https://github.com/digitalbazaar/forge/commit/260425c6167a38aae038697132483b5517b26451"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27"
}
],
"release_date": "2025-11-26T22:23:26.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "node-forge: node-forge ASN.1 Unbounded Recursion"
},
{
"cve": "CVE-2025-68157",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-02-06T00:01:03.150548+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437210"
}
],
"notes": [
{
"category": "description",
"text": "An SSRF flaw has been discovered in Webpack. When experiments.buildHttp is enabled, webpack\u2019s HTTP(S) resolver (HttpUriPlugin) enforces allowedUris only for the initial URL, but does not re-validate allowedUris after following HTTP 30x redirects. As a result, an import that appears restricted to a trusted allow-list can be redirected to HTTP(S) URLs outside the allow-list. This is a policy/allow-list bypass that enables build-time SSRF behavior (requests from the build machine to internal-only endpoints, depending on network access) and untrusted content inclusion in build outputs (redirected content is treated as module source and bundled).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webpack: webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68157"
},
{
"category": "external",
"summary": "RHBZ#2437210",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437210"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68157",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68157"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68157",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68157"
},
{
"category": "external",
"summary": "https://github.com/webpack/webpack/security/advisories/GHSA-38r7-794h-5758",
"url": "https://github.com/webpack/webpack/security/advisories/GHSA-38r7-794h-5758"
}
],
"release_date": "2026-02-05T23:08:13.214000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "webpack: webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects"
},
{
"cve": "CVE-2025-68458",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-02-06T00:01:00.165396+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437209"
}
],
"notes": [
{
"category": "description",
"text": "An SSRF flaw has been discovered in Webpack. When experiments.buildHttp is enabled, webpack\u2019s HTTP(S) resolver (HttpUriPlugin) can be bypassed to fetch resources from hosts outside allowedUris by using crafted URLs that include userinfo (username:password@host). If allowedUris enforcement relies on a raw string prefix check (e.g., uri.startsWith(allowed)), a URL that looks allow-listed can pass validation while the actual network request is sent to a different authority/host after URL parsing. This is a policy/allow-list bypass that enables build-time SSRF behavior (outbound requests from the build machine to internal-only endpoints, depending on network access) and untrusted content inclusion (the fetched response is treated as module source and bundled).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webpack: webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68458"
},
{
"category": "external",
"summary": "RHBZ#2437209",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437209"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68458",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68458"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68458",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68458"
},
{
"category": "external",
"summary": "https://github.com/webpack/webpack/security/advisories/GHSA-8fgc-7cc6-rx7x",
"url": "https://github.com/webpack/webpack/security/advisories/GHSA-8fgc-7cc6-rx7x"
}
],
"release_date": "2026-02-05T23:08:01.102000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "webpack: webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior"
},
{
"cve": "CVE-2025-69873",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-02-11T19:01:32.953264+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2439070"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ajv. When the $data option is enabled, the value of the pattern keyword is passed directly to the JavaScript RegExp() constructor without sufficient validation. An attacker able to supply a malicious regular expression pattern can trigger a ReDoS (Regular Expression Denial of Service), causing the application to become unresponsive and resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ajv: ReDoS via $data reference",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, the $data option must be enabled and the attacker needs to be able to send a payload with a specially crafted regular expression to the application processing the input. A 31-character payload causes approximately 44 seconds of execution, with each additional character doubling the execution time. Therefore, even a small payload can cause an application to become unresponsive and eventually result in a denial of service. Due to this reason, this flaw has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69873"
},
{
"category": "external",
"summary": "RHBZ#2439070",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2439070"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69873",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69873"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69873",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69873"
},
{
"category": "external",
"summary": "https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69873-ajv-ReDoS.md",
"url": "https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69873-ajv-ReDoS.md"
}
],
"release_date": "2026-02-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"category": "workaround",
"details": "To mitigate this issue, disable the $data feature if your application does not require it. If $data must be used, implement strict validation of the input fields that are referenced by the pattern keyword to ensure they contain only expected and safe characters.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ajv: ReDoS via $data reference"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-25896",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-02-20T22:01:59.622413+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2441501"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by providing a specially crafted XML input. The system incorrectly interprets a dot in a DOCTYPE entity name as a regular expression wildcard during processing. This allows the attacker to bypass security measures and inject malicious scripts, resulting in Cross-Site Scripting (XSS) when the parsed output is displayed to users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-xml-parser: fast-xml-parser: Cross-Site Scripting (XSS) due to improper DOCTYPE entity handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has been assessed as IMPORTANT for Red Hat products. This vulnerability arises when the parsed XML output is subsequently rendered to users which requires the interaction of the user. The impact of this flaw is also limited to the user\u0027s browser context.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25896"
},
{
"category": "external",
"summary": "RHBZ#2441501",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2441501"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25896",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25896"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25896",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25896"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/943ef0eb1b2d3284e72dd74f44a042ee9f07026e",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/943ef0eb1b2d3284e72dd74f44a042ee9f07026e"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/ddcd0acf26ddd682cb0dc15a2bd6aa3b96bb1e69",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/ddcd0acf26ddd682cb0dc15a2bd6aa3b96bb1e69"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.5",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.5"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-m7jm-9gc2-mpf2",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-m7jm-9gc2-mpf2"
}
],
"release_date": "2026-02-20T20:57:48.074000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-xml-parser: fast-xml-parser: Cross-Site Scripting (XSS) due to improper DOCTYPE entity handling"
},
{
"cve": "CVE-2026-26278",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-02-19T21:03:33.363864+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2441120"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by providing a specially crafted, small XML input. This input can force the XML parser to perform an unlimited amount of entity expansion, consuming excessive resources. This can lead to the application freezing for an extended period, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-xml-parser: fast-xml-parser: Denial of Service via unlimited XML entity expansion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-26278"
},
{
"category": "external",
"summary": "RHBZ#2441120",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2441120"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-26278",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-26278"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-26278",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26278"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/910dae5be2de2955e968558fadf6e8f74f117a77",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/910dae5be2de2955e968558fadf6e8f74f117a77"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.6",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.6"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-jmr7-xgp7-cmfj",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-jmr7-xgp7-cmfj"
}
],
"release_date": "2026-02-19T19:40:55.842000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-xml-parser: fast-xml-parser: Denial of Service via unlimited XML entity expansion"
},
{
"cve": "CVE-2026-26996",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-02-20T04:01:11.896063+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2441268"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in minimatch. A remote attacker could exploit this Regular Expression Denial of Service (ReDoS) vulnerability by providing a specially crafted glob pattern. This pattern, containing numerous consecutive wildcard characters, causes excessive processing and exponential backtracking in the regular expression engine. Successful exploitation leads to a Denial of Service (DoS), making the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "minimatch: minimatch: Denial of Service via specially crafted glob patterns",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this flaw requires that a user or service processes untrusted input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-26996"
},
{
"category": "external",
"summary": "RHBZ#2441268",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2441268"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-26996",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-26996"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-26996",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26996"
},
{
"category": "external",
"summary": "https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5",
"url": "https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5"
},
{
"category": "external",
"summary": "https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26",
"url": "https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26"
}
],
"release_date": "2026-02-20T03:05:21.105000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "minimatch: minimatch: Denial of Service via specially crafted glob patterns"
},
{
"cve": "CVE-2026-27904",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-02-26T02:01:23.004531+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2442922"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in minimatch. A remote attacker could exploit this vulnerability by providing a specially crafted glob expression with nested unbounded quantifiers. This could lead to catastrophic backtracking in the V8 JavaScript engine, causing the application to become unresponsive and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this flaw requires that a user or service processes untrusted input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27904"
},
{
"category": "external",
"summary": "RHBZ#2442922",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2442922"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27904",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27904"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27904",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27904"
},
{
"category": "external",
"summary": "https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74",
"url": "https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74"
}
],
"release_date": "2026-02-26T01:07:42.693000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions"
},
{
"cve": "CVE-2026-27942",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-02-26T03:01:53.367202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2442938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-xml-parser. A user can exploit this flaw by processing specially crafted XML data with the XML builder when the `preserveOrder` option is enabled. This can lead to a stack overflow, causing the application to crash and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-xml-parser: fast-xml-parser: Stack overflow leads to Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The flaw affects the XML builder component of the fast-xml-parser library and is triggered only when the preserveOrder option is explicitly enabled. In Red Hat\u2013shipped configurations, this option is not enabled by default, and the vulnerable code path is therefore not exercised under typical deployments.\nThe underlying issue results in uncontrolled recursion leading to a stack overflow condition, which causes the application to terminate unexpectedly. While this can be triggered via crafted input, the impact is limited strictly to denial of service (DoS) and does not provide a mechanism for arbitrary code execution, privilege escalation, or data disclosure.\nFurthermore, exploitation requires that the affected application processes attacker-controlled XML input through the XML builder functionality with the specific vulnerable configuration enabled. This significantly reduces the attack surface and introduces environmental constraints not considered in the generalized NVD scoring.\n\nGiven the absence of confidentiality and integrity impact, the requirement for non-default configuration, and the limitation of the impact to process termination, Red Hat considers the practical risk to be lower than the NVD assessment. As such, this issue is classified as Moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27942"
},
{
"category": "external",
"summary": "RHBZ#2442938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2442938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27942",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27942"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27942",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27942"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/c13a961910f14986295dd28484eee830fa1a0e8a",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/c13a961910f14986295dd28484eee830fa1a0e8a"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/pull/791",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/pull/791"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-fj3w-jwp8-x2g3",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-fj3w-jwp8-x2g3"
}
],
"release_date": "2026-02-26T01:22:11.383000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, configure applications using the `fast-xml-parser` XML builder to set the `preserveOrder` option to `false`. Alternatively, ensure that all XML input data is thoroughly validated before being passed to the builder to prevent the processing of malicious or malformed content.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "fast-xml-parser: fast-xml-parser: Stack overflow leads to Denial of Service"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-33036",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-03-20T06:02:18.306021+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449458"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by supplying specially crafted XML input containing numeric character references or standard XML entities. This input can bypass configured entity expansion limits, leading to excessive memory allocation and high CPU usage. The primary consequence is a Denial of Service (DoS), which can crash the affected process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-xml-parser: fast-xml-parser: Denial of Service via XML entity expansion bypass",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33036"
},
{
"category": "external",
"summary": "RHBZ#2449458",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449458"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33036",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33036"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33036",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33036"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/bd26122c838e6a55e7d7ac49b4ccc01a49999a01",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/bd26122c838e6a55e7d7ac49b4ccc01a49999a01"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.5.6",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.5.6"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-8gc5-j5rx-235r",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-8gc5-j5rx-235r"
}
],
"release_date": "2026-03-20T05:17:03.290000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "fast-xml-parser: fast-xml-parser: Denial of Service via XML entity expansion bypass"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-48779",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-16T22:01:24.571224+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489661"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `ws` WebSocket library. A remote attacker can exploit this flaw by sending a high volume of small, fragmented data, leading to excessive memory consumption and subsequent process termination. This can result in service disruption for Red Hat products that utilize `ws` for WebSocket communication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "RHBZ#2489661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48779"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7",
"url": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53",
"url": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94",
"url": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8",
"url": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p"
}
],
"release_date": "2026-06-16T21:26:22.537000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:38:34+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.18/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:c291acc39b5c5bb3a2c3e9ab83a539ac2553d4b021892119b54e28f86f4094c6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:420112898072e37fb7698a706176cd71288f104f7740848378b33bc36d377c96_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:47b312b3d0bb3b8e63a099f534bf51880b2ba739f7a674fee6607efb21e2865d_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c2289874552bccfbb09fc0053f59d5a95478b517ff89816c100bf38b173729a5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:c51fb28e26b47b96cdf736b30ca7a27dff4fc4c579b7d8638e52958f04be45a3_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:468c2b233a2d4e44b3016139b52a06d28101a63d8b70c1cc3ea413a082bcaf58_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:6d3eceda5b92beb26d20e83bd814ee25e83896c9ba1e5cc6b53cd97c860181ad_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/cephcsi-rhel9@sha256:da2dbfde9be76d257df89e168285ed7a03173dc03ea4bc0ee3d13e46d63d0661_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:26b1d264c455a9796ed3c52fba80bad8154a58d88244025397ce2964072e5cd5_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:5878042e8d556331805517a25263457772ca13efeef2da330ededc9a47159861_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-core-rhel9@sha256:b60dfc33f2fea78b4f18e0cdc5315f2fe1d35e5efd649b79019ab74be2416291_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-operator-bundle@sha256:0b6ab8a023058f28c757d590bdea193c0d951535b6dc15be39eb68c6ff9db607_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:607d09cdfdeb17b190a0fe0497335a95d6ef7896af4f89bb8125d8e9904b0cae_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:a36e460e0f1fc24fffeb1dd335d48d9621a48f09c5135f38525554466525575b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:dc2b8a25fd60d1d132ddccf396bcc0b538f63f9e2f8ec26d71a814e36621b884_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:eb8a159f967019ed03d30946745b2e493354e565472af45fd6d20aef58c337b0_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:45a98fcbc383f76e919c0bed83205b66fac0cc864bff2f6b68efd2ad96efaeba_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:d50cd5cf17ec3f53d23bbfedebf63bf5d63479ac754cfdd485977f1076ec40ca_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:f599c8dfc75e520ce40f699d991607061785b5f8f8a59fadbd7152688c1240d0_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:b510e61d39cbda520b59e8bf9c9c778fe10f606389e92889c8f88bea2aebd5de_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:51791037c682689ac6e3fdd880fe3792e50792fa5a940135e3e93209f4761799_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:69d64fcb0609dca23ca051a1e67a3c3af02560336709bc0a7197fb84a7523246_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:71706aa11d805792e72b431b33a6dce4dadba63073f396c0f27ec0601834e1c4_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:d8e259446d3a6782bef0e3d03fcf5d2e8904017a30ed559d3e5825a5465a2cb2_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:0b45328822aba0f4214cab4dba2bae2b1488fd5827a606aeed642a1be0448dae_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:1c04bab4645f9d2e896443f138b06a8c3aedcfd0880db10dda6ad3afa7ef4e0c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:54fed3e921c7d3dcc59165adbc58efc95602d22b5f6f934b1021b62945ccd4f7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-operator-bundle@sha256:2b8bf257c02a63d571dae5c4bd913b57f22344cf393ec6ec39a816dd81949406_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:0e4836594ee56f9f76acaded91f46a888d467c55b60927b8b4880efff443023d_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:3717ebdb2d24380b42a9b5c49ee1275404cd208cbc6a1ff235903d484601fde4_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:846e65297406e3d0a28084bc37f27fd83b87a06831942db3c34aba8398e8a8c1_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:aa8639804df917f57fb9abc0f45b5bc9b639c1a2066d50ba5c6a3303c1acd9a7_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3ce8ecdfc46bca8d4cd467312210ca6c3bfde6180d3de86d7eef092365eb6d26_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8fddce448506dbb6b87ffe4cbefc5bfc82fffd6d887fb2be82feea55f005c168_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:b758d99f720ee09c280afb5f180bc9aa20871ca9836c248953f1ce6c34b34a9c_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cli-rhel9@sha256:d7e5ece6193f6a1a22322f70db8a97ba9c98b9997149482be9b3ccde48c3a698_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:59eabc42d9841bd6653a0bf071d68b05ea3d73ea0b44c5fafb7129a3055a1c0f_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:b02496817ca414d0de9e0d6022ae603f522b0786a7966a47f26d0ec33de0a33c_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-console-rhel9@sha256:fb4d01dba4d0dc21615f4dd77ca375ce1f1d17cca24f7d1bc2e4e875d8ca2897_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:6f837b2d2f1eeb67ce4c2067e5505b53be591c6c4196c11ce0d7742f1a398148_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9c3d00f45bed083385ac64baf6846aa94be246a7fd1209d1bf7aef3eb14e57dd_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:d36b7b546db2b55006937b6bfbf3a4532ddb7ba7a226934343974a0411d92391_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:30ceeb5a96f7e88c89fd961bb4d4750aa811bb40d89527a21d5a13faf64b2577_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:036a439173d4c215ea95e723326584e67baeb6563b15bb4c5a8ade841d9f7ae0_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:22e957a5e533ffba7166bec84da434aac0ea97fe3f21dae52d240e2689ea251f_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:637bc6559d4f0ce2493b309d3e48d4c8508b8c8cffbf6932297b75fa0b9e2ad9_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a0010ef67a5a42768400e0dd119fca38db798dc59b26c1343b8fe2ab27f85251_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4a99c6b34ab90e1b62d44fbedccd29ff6509d4128d914c266d2fa46d1c65be18_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:8e6990d45c7aadbd30a3d087fb4283e6548158826e4da41434deca22136038c4_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:b07da9206db17bfd78e0857bc484f821819d84f5a58d90c18e7eaca80def336a_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d87a9436f0fee50cf7d41e1fd7582fa976f7804ee964f57a16d7d53fcaadecb9_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a849d3f0e7b8816ad073fe3df1fad12f15faad7c8d1bcf931f87a4ad2c3f391c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f32b82a5e58acd1c767723c4a18e1433cacec6c38453a02c5fc8fa845529f04d_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:f476c4cc04a607ba405f9e760a3f605186d81893dabb8f86509fb9f77a28e871_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:fdfd5e85a91b89083fdd581028f1bb3b3aa85f238d40d0c10a1e62870ee955ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d1ac9001529e591b4dde60f0f182803443bd96cf786e63f04c879fdbc2b508d6_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:4e56fa0642d55727628d2304f733b5e798edce579682a5a09e27b77c5de6ae02_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:77871cf90230264a41c635be6183f0e47588b78d4f395786187484e9354eca1b_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:86f6564e49588a8aca775f3f6d9d3405873311035d53aefe64656dbacd4ca4c0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:88eb9845f9e130b971b250868d1a80c661554b2a42373f4ce48c98c7fd90c64b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:80123913a6c029e1300230eefaebe1936dd5144b82331d41fd628d023e5d96ea_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:8bcabdc079ae6058b7ca7f0dd638c4d2f3c12179d63de459a1ce6aab8cfd9073_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ca4a56ba4346ca7b407c565ea45a78a60839b4607a332eb0df1dd9c963b2a345_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:db1cc2842ef45c7e7f4cd82ba81f298577bd9649d4eda3638c3535f8d1bbd77b_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-operator-bundle@sha256:d5e7ddc6967ff66694d49a42426692ee8f455d1eff62fc16f40ed8504fb3740e_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:98da94c59765b13ad1c481494117249e7b63db14649bc662cb333165283f2858_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:01c47fbb5f943a0fa01c530ac698972f02c25d3b410799bcbd830bae462309f2_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:acf01b1f2141d5e41306fa9526bba34169bc305b84891ee5ab41947c9c48dda7_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:cb8647b6fb81ee9c1870aa8720ef3a4f39e7bd4cff0096546d31186d33aa50d9_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d713e46fd04c8a614d2fd9f0580f8abba33d4c09cd309ce21ecec73fd7ff3090_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:2179b740a407bf8a50513c6b623e6028681db126e0958cefb96b42d6dc7d6e83_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:7aefd69840f756a1d4713227bfaafc2b9e7293c10f36023c1f163b7e55fbc70c_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:a7f32ada33378d1c4dd3e26fe245bb4d7addc1f048d9e4ba5f214a98f8c59259_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:1a1fcf4d8711e638edf107e6257dd7d16fd8ce4178177f44581e3d02dd5aca89_s390x",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:26128c96169daccafca52a2212c926941b0e13edbee3030b894e8d1dcd663a23_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2a2325e6776be0bac46a8697bbc1931cd99d4f240f0ea21b3a62230c4ad516cc_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/odr-rhel9-operator@sha256:d5d08c8999c124212d7faad75fefae8304c180a5aedf0a5961c74ea4fe8a50c8_arm64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:34390864a25b131f2c77b98b118482cc3a3b65c3b0003697ccca4cb272e798b0_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:3214be65fb07e0b405584a9627d7e87016251a7e06da5eb02c6c98c31a6aca7b_amd64",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:6ca545ad0f696711101b8d93f55704ef8556921313feba2bf22a53ecf73e9831_ppc64le",
"Red Hat Openshift Data Foundation 4.18:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:c181aaf131c0aa9e2e16c2d54a7620aac3a9ce213a4a63cb3cfde045ce45e404_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments"
}
]
}
RHSA-2026:41944
Vulnerability from csaf_redhat - Published: 2026-07-20 09:45 - Updated: 2026-08-10 23:45Summary
Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.19.20 security, enhancement & bug fix update
Severity
Important
Notes
Topic: Red Hat OpenShift Data Foundation 4.19.20 security, enhancement & bug fix update
Details: Red Hat OpenShift Data Foundation 4.19.20 security, enhancement & bug fix update
FIXED BUGS:
==========
DFBUGS-7342: RHODF 4.19.20 release
DFBUGS-7332: [Backport for 4.19] - [GSS][ODF][MCG] noobaa-db-pg-cluster won't synchronize anymore - "could not receive data from WAL stream: ERROR: requested WAL segment 00000008000001C600000068 has already been removed"
DFBUGS-6940: [4.19.z] Integrate ibm-storage-odf-operator 1.9.0
DFBUGS-6542: [ODF 4.19.z CLONE] - Provider Server sends sub channel to client only when provider side csv is at the tip of the sub channel in the catalogsource
DFBUGS-6529: [Backport to 4.19.z] maintenance mode is always set for storageclients in non RDR clusters
DFBUGS-6523: CLONE 4.19 - [UI] Resource profile calculations doesn't include NFS
DFBUGS-4768: [Backport to odf-4.19.z]Remove duplicate PersistentVolumeUsageCritical alerts
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in node-forge. This vulnerability allows unauthenticated attackers to bypass downstream cryptographic verifications and security decisions via crafting ASN.1 (Abstract Syntax Notation One) structures to desynchronize schema validations, yielding a semantic divergence.
8.7 (High)
Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.
8.2 (High)
Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in qs, a module used for parsing query strings. A remote attacker can exploit an improper input validation vulnerability by sending specially crafted HTTP requests that use bracket notation (e.g., `a[]=value`). This bypasses the `arrayLimit` option, which is designed to limit the size of parsed arrays and prevent resource exhaustion. Successful exploitation can lead to memory exhaustion, causing a Denial of Service (DoS) where the application crashes or becomes unresponsive, making the service unavailable to users.
7.5 (High)
Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Workaround
|
Threats
Impact
Important
An ASN.1 Denial of Service (Dos) vulnerability exists in the node-forge asn1.fromDer function within forge/lib/asn1.js. The ASN.1 DER parser implementation (_fromDer) recurses for every constructed ASN.1 value (SEQUENCE, SET, etc.) and lacks a guard limiting recursion depth. An attacker can craft a small DER blob containing a very large nesting depth of constructed TLVs which causes the Node.js V8 engine to exhaust its call stack and throw RangeError: Maximum call stack size exceeded, crashing or incapacitating the process handling the parse. This is a remote, low-cost Denial-of-Service against applications that parse untrusted ASN.1 objects.
5.3 (Medium)
Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Workaround
|
Threats
Impact
Moderate
An SSRF flaw has been discovered in Webpack. When experiments.buildHttp is enabled, webpack’s HTTP(S) resolver (HttpUriPlugin) enforces allowedUris only for the initial URL, but does not re-validate allowedUris after following HTTP 30x redirects. As a result, an import that appears restricted to a trusted allow-list can be redirected to HTTP(S) URLs outside the allow-list. This is a policy/allow-list bypass that enables build-time SSRF behavior (requests from the build machine to internal-only endpoints, depending on network access) and untrusted content inclusion in build outputs (redirected content is treated as module source and bundled).
CWE-918 - Server-Side Request Forgery (SSRF)Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Workaround
|
Threats
Impact
Low
An SSRF flaw has been discovered in Webpack. When experiments.buildHttp is enabled, webpack’s HTTP(S) resolver (HttpUriPlugin) can be bypassed to fetch resources from hosts outside allowedUris by using crafted URLs that include userinfo (username:password@host). If allowedUris enforcement relies on a raw string prefix check (e.g., uri.startsWith(allowed)), a URL that looks allow-listed can pass validation while the actual network request is sent to a different authority/host after URL parsing. This is a policy/allow-list bypass that enables build-time SSRF behavior (outbound requests from the build machine to internal-only endpoints, depending on network access) and untrusted content inclusion (the fetched response is treated as module source and bundled).
CWE-918 - Server-Side Request Forgery (SSRF)Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Workaround
|
Threats
Impact
Low
A flaw was found in ajv. When the $data option is enabled, the value of the pattern keyword is passed directly to the JavaScript RegExp() constructor without sufficient validation. An attacker able to supply a malicious regular expression pattern can trigger a ReDoS (Regular Expression Denial of Service), causing the application to become unresponsive and resulting in a denial of service.
7.5 (High)
Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Workaround
|
Threats
Impact
Important
A denial of service flaw has been discovered in the fast-xml-parser npm library. In fast-xml-parser, a RangeError vulnerability exists in the numeric entity processing of fast-xml-parser when parsing XML with out-of-range entity code points (e.g., `�` or `�`). This causes the parser to throw an uncaught exception, crashing any application that processes untrusted XML input.
5.3 (Medium)
Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by providing a specially crafted XML input. The system incorrectly interprets a dot in a DOCTYPE entity name as a regular expression wildcard during processing. This allows the attacker to bypass security measures and inject malicious scripts, resulting in Cross-Site Scripting (XSS) when the parsed output is displayed to users.
7.1 (High)
Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Workaround
|
Threats
Impact
Important
A denial of service flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by providing a specially crafted, small XML input. This input can force the XML parser to perform an unlimited amount of entity expansion, consuming excessive resources. This can lead to the application freezing for an extended period, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in minimatch. A remote attacker could exploit this Regular Expression Denial of Service (ReDoS) vulnerability by providing a specially crafted glob pattern. This pattern, containing numerous consecutive wildcard characters, causes excessive processing and exponential backtracking in the regular expression engine. Successful exploitation leads to a Denial of Service (DoS), making the application unresponsive.
6.5 (Medium)
Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Threats
Impact
Moderate
A flaw was found in minimatch. A remote attacker could exploit this vulnerability by providing a specially crafted glob expression with nested unbounded quantifiers. This could lead to catastrophic backtracking in the V8 JavaScript engine, causing the application to become unresponsive and resulting in a Denial of Service (DoS).
6.5 (Medium)
Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Threats
Impact
Moderate
A flaw was found in fast-xml-parser. A user can exploit this flaw by processing specially crafted XML data with the XML builder when the `preserveOrder` option is enabled. This can lead to a stack overflow, causing the application to crash and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — | ||
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Threats
Impact
Important
A flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by supplying specially crafted XML input containing numeric character references or standard XML entities. This input can bypass configured entity expansion limits, leading to excessive memory allocation and high CPU usage. The primary consequence is a Denial of Service (DoS), which can crash the affected process.
7.5 (High)
Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.
7.5 (High)
Affected products
Fixed
78 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 | — |
Workaround
|
Threats
Impact
Important
References
146 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Data Foundation 4.19.20 security, enhancement \u0026 bug fix update",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Data Foundation 4.19.20 security, enhancement \u0026 bug fix update\n\nFIXED BUGS:\n==========\nDFBUGS-7342: RHODF 4.19.20 release\nDFBUGS-7332: [Backport for 4.19] - [GSS][ODF][MCG] noobaa-db-pg-cluster won\u0027t synchronize anymore - \"could not receive data from WAL stream: ERROR: requested WAL segment 00000008000001C600000068 has already been removed\"\nDFBUGS-6940: [4.19.z] Integrate ibm-storage-odf-operator 1.9.0\nDFBUGS-6542: [ODF 4.19.z CLONE] - Provider Server sends sub channel to client only when provider side csv is at the tip of the sub channel in the catalogsource\nDFBUGS-6529: [Backport to 4.19.z] maintenance mode is always set for storageclients in non RDR clusters\nDFBUGS-6523: CLONE 4.19 - [UI] Resource profile calculations doesn\u0027t include NFS\nDFBUGS-4768: [Backport to odf-4.19.z]Remove duplicate PersistentVolumeUsageCritical alerts",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:41944",
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-12816",
"url": "https://access.redhat.com/security/cve/CVE-2025-12816"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-13465",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-15284",
"url": "https://access.redhat.com/security/cve/CVE-2025-15284"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66031",
"url": "https://access.redhat.com/security/cve/CVE-2025-66031"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68157",
"url": "https://access.redhat.com/security/cve/CVE-2025-68157"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68458",
"url": "https://access.redhat.com/security/cve/CVE-2025-68458"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69873",
"url": "https://access.redhat.com/security/cve/CVE-2025-69873"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25128",
"url": "https://access.redhat.com/security/cve/CVE-2026-25128"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25896",
"url": "https://access.redhat.com/security/cve/CVE-2026-25896"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-26278",
"url": "https://access.redhat.com/security/cve/CVE-2026-26278"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-26996",
"url": "https://access.redhat.com/security/cve/CVE-2026-26996"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27904",
"url": "https://access.redhat.com/security/cve/CVE-2026-27904"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27942",
"url": "https://access.redhat.com/security/cve/CVE-2026-27942"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33036",
"url": "https://access.redhat.com/security/cve/CVE-2026-33036"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48779",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/",
"url": "https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41944.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.19.20 security, enhancement \u0026 bug fix update",
"tracking": {
"current_release_date": "2026-08-10T23:45:05+00:00",
"generator": {
"date": "2026-08-10T23:45:05+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHSA-2026:41944",
"initial_release_date": "2026-07-20T09:45:40+00:00",
"revision_history": [
{
"date": "2026-07-20T09:45:40+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-10T23:45:05+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Openshift Data Foundation 4.19",
"product": {
"name": "Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_data_foundation:4.19::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Openshift Data Foundation"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9@sha256%3A62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b?arch=amd64\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9\u0026tag=1783684360"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9-operator@sha256%3A0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43?arch=amd64\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9-operator\u0026tag=1783684068"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"product_id": "registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-operator-bundle@sha256%3Aabcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5?arch=amd64\u0026repository_url=registry.redhat.io/odf4/cephcsi-operator-bundle\u0026tag=1784057956"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"product": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"product_id": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mcg-core-rhel9@sha256%3A4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef?arch=amd64\u0026repository_url=registry.redhat.io/odf4/mcg-core-rhel9\u0026tag=1784054582"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"product": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"product_id": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mcg-rhel9-operator@sha256%3A3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14?arch=amd64\u0026repository_url=registry.redhat.io/odf4/mcg-rhel9-operator\u0026tag=1784054606"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"product": {
"name": "registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"product_id": "registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mcg-operator-bundle@sha256%3A8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67?arch=amd64\u0026repository_url=registry.redhat.io/odf4/mcg-operator-bundle\u0026tag=1784058120"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"product_id": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-console-rhel9@sha256%3A2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c?arch=amd64\u0026repository_url=registry.redhat.io/odf4/ocs-client-console-rhel9\u0026tag=1784055295"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"product_id": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-rhel9-operator@sha256%3A723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42?arch=amd64\u0026repository_url=registry.redhat.io/odf4/ocs-client-rhel9-operator\u0026tag=1783684603"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"product_id": "registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-operator-bundle@sha256%3A4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60?arch=amd64\u0026repository_url=registry.redhat.io/odf4/ocs-client-operator-bundle\u0026tag=1784058267"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"product": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"product_id": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-metrics-exporter-rhel9@sha256%3A837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2?arch=amd64\u0026repository_url=registry.redhat.io/odf4/ocs-metrics-exporter-rhel9\u0026tag=1783684668"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"product": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"product_id": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-rhel9-operator@sha256%3A02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf?arch=amd64\u0026repository_url=registry.redhat.io/odf4/ocs-rhel9-operator\u0026tag=1783684667"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"product": {
"name": "registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"product_id": "registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-operator-bundle@sha256%3A1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb?arch=amd64\u0026repository_url=registry.redhat.io/odf4/ocs-operator-bundle\u0026tag=1784058383"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"product_id": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-cli-rhel9@sha256%3A3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-cli-rhel9\u0026tag=1784054873"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"product_id": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-cloudnative-pg-rhel9-operator@sha256%3A5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator\u0026tag=1783684707"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"product_id": "registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-console-rhel9@sha256%3Ae68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-console-rhel9\u0026tag=1784055589"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"product_id": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-cosi-sidecar-rhel9@sha256%3A9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-cosi-sidecar-rhel9\u0026tag=1783684779"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-rhel9-operator@sha256%3Af25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-rhel9-operator\u0026tag=1783684831"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-operator-bundle@sha256%3A0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-operator-bundle\u0026tag=1784058492"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-sidecar-rhel9@sha256%3A9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9\u0026tag=1783684839"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"product_id": "registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-dependencies-operator-bundle@sha256%3Aa2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-dependencies-operator-bundle\u0026tag=1784058519"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"product_id": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-console-rhel9@sha256%3A3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-console-rhel9\u0026tag=1784055533"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"product_id": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-rhel9-operator@sha256%3Aae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-rhel9-operator\u0026tag=1784055558"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"product_id": "registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-operator-bundle@sha256%3A8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-operator-bundle\u0026tag=1784058706"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"product_id": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-must-gather-rhel9@sha256%3A813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-must-gather-rhel9\u0026tag=1784056134"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"product_id": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-rhel9-operator@sha256%3Ae46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-rhel9-operator\u0026tag=1783685128"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"product_id": "registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-operator-bundle@sha256%3Aa39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-operator-bundle\u0026tag=1784058758"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"product": {
"name": "registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"product_id": "registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odf-prometheus-operator-bundle@sha256%3A6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odf-prometheus-operator-bundle\u0026tag=1784058766"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"product": {
"name": "registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"product_id": "registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odr-cluster-operator-bundle@sha256%3A3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odr-cluster-operator-bundle\u0026tag=1784058817"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"product": {
"name": "registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"product_id": "registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odr-hub-operator-bundle@sha256%3Aa2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odr-hub-operator-bundle\u0026tag=1784058873"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"product": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"product_id": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odr-rhel9-operator@sha256%3A16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odr-rhel9-operator\u0026tag=1783685129"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"product": {
"name": "registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"product_id": "registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odr-recipe-operator-bundle@sha256%3Af24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377?arch=amd64\u0026repository_url=registry.redhat.io/odf4/odr-recipe-operator-bundle\u0026tag=1784059031"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64",
"product": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64",
"product_id": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rook-ceph-rhel9-operator@sha256%3A694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4?arch=amd64\u0026repository_url=registry.redhat.io/odf4/rook-ceph-rhel9-operator\u0026tag=1783685375"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"product": {
"name": "registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"product_id": "registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rook-ceph-operator-bundle@sha256%3A61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8?arch=amd64\u0026repository_url=registry.redhat.io/odf4/rook-ceph-operator-bundle\u0026tag=1784059042"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9@sha256%3A1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9\u0026tag=1783684360"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9-operator@sha256%3A1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9-operator\u0026tag=1783684068"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"product_id": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/mcg-core-rhel9@sha256%3A9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/mcg-core-rhel9\u0026tag=1784054582"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"product_id": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/mcg-rhel9-operator@sha256%3A69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/mcg-rhel9-operator\u0026tag=1784054606"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"product_id": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-console-rhel9@sha256%3A9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/ocs-client-console-rhel9\u0026tag=1784055295"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"product_id": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-rhel9-operator@sha256%3Ab7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/ocs-client-rhel9-operator\u0026tag=1783684603"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"product_id": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ocs-metrics-exporter-rhel9@sha256%3A4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/ocs-metrics-exporter-rhel9\u0026tag=1783684668"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"product_id": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ocs-rhel9-operator@sha256%3A68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/ocs-rhel9-operator\u0026tag=1783684667"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-cli-rhel9@sha256%3A8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-cli-rhel9\u0026tag=1784054873"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-cloudnative-pg-rhel9-operator@sha256%3A43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator\u0026tag=1783684707"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-console-rhel9@sha256%3Abd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-console-rhel9\u0026tag=1784055589"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-cosi-sidecar-rhel9@sha256%3A99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-cosi-sidecar-rhel9\u0026tag=1783684779"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-rhel9-operator@sha256%3Aed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-rhel9-operator\u0026tag=1783684831"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-sidecar-rhel9@sha256%3Ad6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9\u0026tag=1783684839"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-console-rhel9@sha256%3Add210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-console-rhel9\u0026tag=1784055533"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-rhel9-operator@sha256%3A2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-rhel9-operator\u0026tag=1784055558"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-must-gather-rhel9@sha256%3A179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-must-gather-rhel9\u0026tag=1784056134"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"product_id": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odf-rhel9-operator@sha256%3Ad61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odf-rhel9-operator\u0026tag=1783685128"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"product_id": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odr-rhel9-operator@sha256%3A9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/odr-rhel9-operator\u0026tag=1783685129"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"product": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"product_id": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rook-ceph-rhel9-operator@sha256%3A5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86?arch=ppc64le\u0026repository_url=registry.redhat.io/odf4/rook-ceph-rhel9-operator\u0026tag=1783685375"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9@sha256%3A56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f?arch=s390x\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9\u0026tag=1783684360"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9-operator@sha256%3Af37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299?arch=s390x\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9-operator\u0026tag=1783684068"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"product": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"product_id": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/mcg-core-rhel9@sha256%3A1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4?arch=s390x\u0026repository_url=registry.redhat.io/odf4/mcg-core-rhel9\u0026tag=1784054582"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"product": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"product_id": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/mcg-rhel9-operator@sha256%3A5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d?arch=s390x\u0026repository_url=registry.redhat.io/odf4/mcg-rhel9-operator\u0026tag=1784054606"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"product_id": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-console-rhel9@sha256%3A661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4?arch=s390x\u0026repository_url=registry.redhat.io/odf4/ocs-client-console-rhel9\u0026tag=1784055295"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"product_id": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-rhel9-operator@sha256%3A0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43?arch=s390x\u0026repository_url=registry.redhat.io/odf4/ocs-client-rhel9-operator\u0026tag=1783684603"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"product": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"product_id": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ocs-metrics-exporter-rhel9@sha256%3A963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361?arch=s390x\u0026repository_url=registry.redhat.io/odf4/ocs-metrics-exporter-rhel9\u0026tag=1783684668"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"product": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"product_id": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ocs-rhel9-operator@sha256%3A9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701?arch=s390x\u0026repository_url=registry.redhat.io/odf4/ocs-rhel9-operator\u0026tag=1783684667"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"product_id": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-cli-rhel9@sha256%3Aced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-cli-rhel9\u0026tag=1784054873"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"product_id": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-cloudnative-pg-rhel9-operator@sha256%3A17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator\u0026tag=1783684707"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"product_id": "registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-console-rhel9@sha256%3A00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-console-rhel9\u0026tag=1784055589"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"product_id": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-cosi-sidecar-rhel9@sha256%3Ade17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-cosi-sidecar-rhel9\u0026tag=1783684779"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-rhel9-operator@sha256%3A3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-rhel9-operator\u0026tag=1783684831"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-sidecar-rhel9@sha256%3A4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9\u0026tag=1783684839"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"product_id": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-console-rhel9@sha256%3A780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-console-rhel9\u0026tag=1784055533"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"product_id": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-rhel9-operator@sha256%3A62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-rhel9-operator\u0026tag=1784055558"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"product_id": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-must-gather-rhel9@sha256%3Aa754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-must-gather-rhel9\u0026tag=1784056134"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"product": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"product_id": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odf-rhel9-operator@sha256%3A8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odf-rhel9-operator\u0026tag=1783685128"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"product": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"product_id": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odr-rhel9-operator@sha256%3A2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05?arch=s390x\u0026repository_url=registry.redhat.io/odf4/odr-rhel9-operator\u0026tag=1783685129"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"product": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"product_id": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rook-ceph-rhel9-operator@sha256%3A4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833?arch=s390x\u0026repository_url=registry.redhat.io/odf4/rook-ceph-rhel9-operator\u0026tag=1783685375"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"product": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"product_id": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cephcsi-rhel9-operator@sha256%3Aa3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be?arch=arm64\u0026repository_url=registry.redhat.io/odf4/cephcsi-rhel9-operator\u0026tag=1783684068"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"product": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"product_id": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"product_identification_helper": {
"purl": "pkg:oci/mcg-rhel9-operator@sha256%3A49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229?arch=arm64\u0026repository_url=registry.redhat.io/odf4/mcg-rhel9-operator\u0026tag=1784054606"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"product_id": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-console-rhel9@sha256%3A7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a?arch=arm64\u0026repository_url=registry.redhat.io/odf4/ocs-client-console-rhel9\u0026tag=1784055295"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"product": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"product_id": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-client-rhel9-operator@sha256%3Af522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32?arch=arm64\u0026repository_url=registry.redhat.io/odf4/ocs-client-rhel9-operator\u0026tag=1783684603"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"product": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"product_id": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-metrics-exporter-rhel9@sha256%3A33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7?arch=arm64\u0026repository_url=registry.redhat.io/odf4/ocs-metrics-exporter-rhel9\u0026tag=1783684668"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"product": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"product_id": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/ocs-rhel9-operator@sha256%3A1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a?arch=arm64\u0026repository_url=registry.redhat.io/odf4/ocs-rhel9-operator\u0026tag=1783684667"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"product_id": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-cli-rhel9@sha256%3A0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-cli-rhel9\u0026tag=1784054873"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"product_id": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-cloudnative-pg-rhel9-operator@sha256%3A7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator\u0026tag=1783684707"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"product_id": "registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-console-rhel9@sha256%3A5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-console-rhel9\u0026tag=1784055589"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"product_id": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-cosi-sidecar-rhel9@sha256%3A8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-cosi-sidecar-rhel9\u0026tag=1783684779"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-rhel9-operator@sha256%3Ad51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-rhel9-operator\u0026tag=1783684831"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"product_id": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-csi-addons-sidecar-rhel9@sha256%3A19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9\u0026tag=1783684839"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"product_id": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-console-rhel9@sha256%3Ae193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-console-rhel9\u0026tag=1784055533"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"product_id": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-multicluster-rhel9-operator@sha256%3A63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-multicluster-rhel9-operator\u0026tag=1784055558"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"product_id": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-must-gather-rhel9@sha256%3Aba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-must-gather-rhel9\u0026tag=1784056134"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"product": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"product_id": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odf-rhel9-operator@sha256%3Ae88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odf-rhel9-operator\u0026tag=1783685128"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"product": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"product_id": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odr-rhel9-operator@sha256%3A924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6?arch=arm64\u0026repository_url=registry.redhat.io/odf4/odr-rhel9-operator\u0026tag=1783685129"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"product": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"product_id": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rook-ceph-rhel9-operator@sha256%3A0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9?arch=arm64\u0026repository_url=registry.redhat.io/odf4/rook-ceph-rhel9-operator\u0026tag=1783685375"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64"
},
"product_reference": "registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x"
},
"product_reference": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64"
},
"product_reference": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64"
},
"product_reference": "registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64"
},
"product_reference": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64"
},
"product_reference": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x"
},
"product_reference": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64"
},
"product_reference": "registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64"
},
"product_reference": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64"
},
"product_reference": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x"
},
"product_reference": "registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64"
},
"product_reference": "registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64"
},
"product_reference": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64"
},
"product_reference": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x"
},
"product_reference": "registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x"
},
"product_reference": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64"
},
"product_reference": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64"
},
"product_reference": "registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64"
},
"product_reference": "registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64"
},
"product_reference": "registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64"
},
"product_reference": "registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64"
},
"product_reference": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x"
},
"product_reference": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64"
},
"product_reference": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
},
"product_reference": "registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64"
},
"product_reference": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x"
},
"product_reference": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le"
},
"product_reference": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64 as a component of Red Hat Openshift Data Foundation 4.19",
"product_id": "Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
},
"product_reference": "registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64",
"relates_to_product_reference": "Red Hat Openshift Data Foundation 4.19"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-12816",
"cwe": {
"id": "CWE-179",
"name": "Incorrect Behavior Order: Early Validation"
},
"discovery_date": "2025-11-25T20:01:05.875196+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2417097"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in node-forge. This vulnerability allows unauthenticated attackers to bypass downstream cryptographic verifications and security decisions via crafting ASN.1 (Abstract Syntax Notation One) structures to desynchronize schema validations, yielding a semantic divergence.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products due to an interpretation conflict in the node-forge library. An unauthenticated attacker could exploit this flaw by crafting malicious ASN.1 structures, leading to a bypass of cryptographic verifications and security decisions in affected applications. This impacts various Red Hat products that utilize node-forge for cryptographic operations.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-12816"
},
{
"category": "external",
"summary": "RHBZ#2417097",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2417097"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-12816",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-12816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-12816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-12816"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge",
"url": "https://github.com/digitalbazaar/forge"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/pull/1124",
"url": "https://github.com/digitalbazaar/forge/pull/1124"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq"
},
{
"category": "external",
"summary": "https://kb.cert.org/vuls/id/521113",
"url": "https://kb.cert.org/vuls/id/521113"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/node-forge",
"url": "https://www.npmjs.com/package/node-forge"
}
],
"release_date": "2025-11-25T19:15:50.243000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications"
},
{
"cve": "CVE-2025-13465",
"cwe": {
"id": "CWE-1321",
"name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)"
},
"discovery_date": "2026-01-21T20:01:28.774829+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2431740"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: prototype pollution in _.unset and _.omit functions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is only exploitable by applications using the _.unset and _.omit functions on an object and allowing user input to determine the path of the property to be removed. This issue only allows the deletion of properties but does not allow overwriting their behavior, limiting the impact to a denial of service. Due to this reason, this vulnerability has been rated with an important severity.\n\nIn Grafana, JavaScript code runs only in the browser, while the server side is all Golang. Therefore, the worst-case scenario is a loss of functionality in the client application inside the browser. To reflect this, the CVSS availability metric and the severity of the Grafana and the Grafana-PCP component have been updated to low and moderate, respectively.\n\nThe lodash dependency is bundled and used by the pcs-web-ui component of the PCS package. In Red Hat Enterprise Linux 8.10, the pcs-web-ui component is no longer included in the PCS package. As a result, RHEL 8.10 does not ship the vulnerable lodash component within PCS and is therefore not-affected by this CVE.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "RHBZ#2431740",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431740"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13465",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13465"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg",
"url": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg"
}
],
"release_date": "2026-01-21T19:05:28.846000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement strict input validation before passing any property paths to the _.unset and _.omit functions to block attempts to access the prototype chain. Ensure that strings like __proto__, constructor and prototype are blocked, for example.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: prototype pollution in _.unset and _.omit functions"
},
{
"cve": "CVE-2025-15284",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-12-29T23:00:58.541337+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2425946"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in qs, a module used for parsing query strings. A remote attacker can exploit an improper input validation vulnerability by sending specially crafted HTTP requests that use bracket notation (e.g., `a[]=value`). This bypasses the `arrayLimit` option, which is designed to limit the size of parsed arrays and prevent resource exhaustion. Successful exploitation can lead to memory exhaustion, causing a Denial of Service (DoS) where the application crashes or becomes unresponsive, making the service unavailable to users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "qs: qs: Denial of Service via improper input validation in array parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products that utilize the `qs` module for parsing query strings, particularly when processing user-controlled input with bracket notation. The `arrayLimit` option, intended to prevent resource exhaustion, is bypassed when bracket notation (`a[]=value`) is used, allowing a remote attacker to cause a denial of service through memory exhaustion. This can lead to application crashes or unresponsiveness, making the service unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-15284"
},
{
"category": "external",
"summary": "RHBZ#2425946",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2425946"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-15284",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15284"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-15284",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15284"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9",
"url": "https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p",
"url": "https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p"
}
],
"release_date": "2025-12-29T22:56:45.240000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "qs: qs: Denial of Service via improper input validation in array parsing"
},
{
"cve": "CVE-2025-66031",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"discovery_date": "2025-11-26T23:01:36.363253+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2417397"
}
],
"notes": [
{
"category": "description",
"text": "An ASN.1 Denial of Service (Dos) vulnerability exists in the node-forge asn1.fromDer function within forge/lib/asn1.js. The ASN.1 DER parser implementation (_fromDer) recurses for every constructed ASN.1 value (SEQUENCE, SET, etc.) and lacks a guard limiting recursion depth. An attacker can craft a small DER blob containing a very large nesting depth of constructed TLVs which causes the Node.js V8 engine to exhaust its call stack and throw RangeError: Maximum call stack size exceeded, crashing or incapacitating the process handling the parse. This is a remote, low-cost Denial-of-Service against applications that parse untrusted ASN.1 objects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: node-forge ASN.1 Unbounded Recursion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66031"
},
{
"category": "external",
"summary": "RHBZ#2417397",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2417397"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66031",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66031"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66031",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66031"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/commit/260425c6167a38aae038697132483b5517b26451",
"url": "https://github.com/digitalbazaar/forge/commit/260425c6167a38aae038697132483b5517b26451"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27"
}
],
"release_date": "2025-11-26T22:23:26.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "node-forge: node-forge ASN.1 Unbounded Recursion"
},
{
"cve": "CVE-2025-68157",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-02-06T00:01:03.150548+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437210"
}
],
"notes": [
{
"category": "description",
"text": "An SSRF flaw has been discovered in Webpack. When experiments.buildHttp is enabled, webpack\u2019s HTTP(S) resolver (HttpUriPlugin) enforces allowedUris only for the initial URL, but does not re-validate allowedUris after following HTTP 30x redirects. As a result, an import that appears restricted to a trusted allow-list can be redirected to HTTP(S) URLs outside the allow-list. This is a policy/allow-list bypass that enables build-time SSRF behavior (requests from the build machine to internal-only endpoints, depending on network access) and untrusted content inclusion in build outputs (redirected content is treated as module source and bundled).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webpack: webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68157"
},
{
"category": "external",
"summary": "RHBZ#2437210",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437210"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68157",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68157"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68157",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68157"
},
{
"category": "external",
"summary": "https://github.com/webpack/webpack/security/advisories/GHSA-38r7-794h-5758",
"url": "https://github.com/webpack/webpack/security/advisories/GHSA-38r7-794h-5758"
}
],
"release_date": "2026-02-05T23:08:13.214000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "webpack: webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects"
},
{
"cve": "CVE-2025-68458",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-02-06T00:01:00.165396+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437209"
}
],
"notes": [
{
"category": "description",
"text": "An SSRF flaw has been discovered in Webpack. When experiments.buildHttp is enabled, webpack\u2019s HTTP(S) resolver (HttpUriPlugin) can be bypassed to fetch resources from hosts outside allowedUris by using crafted URLs that include userinfo (username:password@host). If allowedUris enforcement relies on a raw string prefix check (e.g., uri.startsWith(allowed)), a URL that looks allow-listed can pass validation while the actual network request is sent to a different authority/host after URL parsing. This is a policy/allow-list bypass that enables build-time SSRF behavior (outbound requests from the build machine to internal-only endpoints, depending on network access) and untrusted content inclusion (the fetched response is treated as module source and bundled).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webpack: webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68458"
},
{
"category": "external",
"summary": "RHBZ#2437209",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437209"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68458",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68458"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68458",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68458"
},
{
"category": "external",
"summary": "https://github.com/webpack/webpack/security/advisories/GHSA-8fgc-7cc6-rx7x",
"url": "https://github.com/webpack/webpack/security/advisories/GHSA-8fgc-7cc6-rx7x"
}
],
"release_date": "2026-02-05T23:08:01.102000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "webpack: webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior"
},
{
"cve": "CVE-2025-69873",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-02-11T19:01:32.953264+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2439070"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ajv. When the $data option is enabled, the value of the pattern keyword is passed directly to the JavaScript RegExp() constructor without sufficient validation. An attacker able to supply a malicious regular expression pattern can trigger a ReDoS (Regular Expression Denial of Service), causing the application to become unresponsive and resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ajv: ReDoS via $data reference",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, the $data option must be enabled and the attacker needs to be able to send a payload with a specially crafted regular expression to the application processing the input. A 31-character payload causes approximately 44 seconds of execution, with each additional character doubling the execution time. Therefore, even a small payload can cause an application to become unresponsive and eventually result in a denial of service. Due to this reason, this flaw has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69873"
},
{
"category": "external",
"summary": "RHBZ#2439070",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2439070"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69873",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69873"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69873",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69873"
},
{
"category": "external",
"summary": "https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69873-ajv-ReDoS.md",
"url": "https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69873-ajv-ReDoS.md"
}
],
"release_date": "2026-02-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"category": "workaround",
"details": "To mitigate this issue, disable the $data feature if your application does not require it. If $data must be used, implement strict validation of the input fields that are referenced by the pattern keyword to ensure they contain only expected and safe characters.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ajv: ReDoS via $data reference"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-25128",
"cwe": {
"id": "CWE-248",
"name": "Uncaught Exception"
},
"discovery_date": "2026-01-30T16:01:27.320561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2435497"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw has been discovered in the fast-xml-parser npm library. In fast-xml-parser, a RangeError vulnerability exists in the numeric entity processing of fast-xml-parser when parsing XML with out-of-range entity code points (e.g., `\u0026#9999999;` or `\u0026#xFFFFFF;`). This causes the parser to throw an uncaught exception, crashing any application that processes untrusted XML input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-xml-parser: fast-xml-parser has RangeError DoS Numeric Entities Bug",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The availability impact of this flaw is limited to the application which bundles the fast-xml-parser library. Red Hat host systems are not at risk of availability impact.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25128"
},
{
"category": "external",
"summary": "RHBZ#2435497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2435497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25128",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25128"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25128",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25128"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/4e387f61c4a5cef792f6a2f42467013290bf95dc",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/4e387f61c4a5cef792f6a2f42467013290bf95dc"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.4",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.4"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-37qj-frw5-hhjh",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-37qj-frw5-hhjh"
}
],
"release_date": "2026-01-30T15:14:58.244000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "fast-xml-parser: fast-xml-parser has RangeError DoS Numeric Entities Bug"
},
{
"cve": "CVE-2026-25896",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-02-20T22:01:59.622413+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2441501"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by providing a specially crafted XML input. The system incorrectly interprets a dot in a DOCTYPE entity name as a regular expression wildcard during processing. This allows the attacker to bypass security measures and inject malicious scripts, resulting in Cross-Site Scripting (XSS) when the parsed output is displayed to users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-xml-parser: fast-xml-parser: Cross-Site Scripting (XSS) due to improper DOCTYPE entity handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has been assessed as IMPORTANT for Red Hat products. This vulnerability arises when the parsed XML output is subsequently rendered to users which requires the interaction of the user. The impact of this flaw is also limited to the user\u0027s browser context.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25896"
},
{
"category": "external",
"summary": "RHBZ#2441501",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2441501"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25896",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25896"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25896",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25896"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/943ef0eb1b2d3284e72dd74f44a042ee9f07026e",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/943ef0eb1b2d3284e72dd74f44a042ee9f07026e"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/ddcd0acf26ddd682cb0dc15a2bd6aa3b96bb1e69",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/ddcd0acf26ddd682cb0dc15a2bd6aa3b96bb1e69"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.5",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.5"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-m7jm-9gc2-mpf2",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-m7jm-9gc2-mpf2"
}
],
"release_date": "2026-02-20T20:57:48.074000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-xml-parser: fast-xml-parser: Cross-Site Scripting (XSS) due to improper DOCTYPE entity handling"
},
{
"cve": "CVE-2026-26278",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-02-19T21:03:33.363864+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2441120"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by providing a specially crafted, small XML input. This input can force the XML parser to perform an unlimited amount of entity expansion, consuming excessive resources. This can lead to the application freezing for an extended period, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-xml-parser: fast-xml-parser: Denial of Service via unlimited XML entity expansion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-26278"
},
{
"category": "external",
"summary": "RHBZ#2441120",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2441120"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-26278",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-26278"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-26278",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26278"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/910dae5be2de2955e968558fadf6e8f74f117a77",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/910dae5be2de2955e968558fadf6e8f74f117a77"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.6",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.3.6"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-jmr7-xgp7-cmfj",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-jmr7-xgp7-cmfj"
}
],
"release_date": "2026-02-19T19:40:55.842000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-xml-parser: fast-xml-parser: Denial of Service via unlimited XML entity expansion"
},
{
"cve": "CVE-2026-26996",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-02-20T04:01:11.896063+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2441268"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in minimatch. A remote attacker could exploit this Regular Expression Denial of Service (ReDoS) vulnerability by providing a specially crafted glob pattern. This pattern, containing numerous consecutive wildcard characters, causes excessive processing and exponential backtracking in the regular expression engine. Successful exploitation leads to a Denial of Service (DoS), making the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "minimatch: minimatch: Denial of Service via specially crafted glob patterns",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this flaw requires that a user or service processes untrusted input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-26996"
},
{
"category": "external",
"summary": "RHBZ#2441268",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2441268"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-26996",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-26996"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-26996",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26996"
},
{
"category": "external",
"summary": "https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5",
"url": "https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5"
},
{
"category": "external",
"summary": "https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26",
"url": "https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26"
}
],
"release_date": "2026-02-20T03:05:21.105000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "minimatch: minimatch: Denial of Service via specially crafted glob patterns"
},
{
"cve": "CVE-2026-27904",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-02-26T02:01:23.004531+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2442922"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in minimatch. A remote attacker could exploit this vulnerability by providing a specially crafted glob expression with nested unbounded quantifiers. This could lead to catastrophic backtracking in the V8 JavaScript engine, causing the application to become unresponsive and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this flaw requires that a user or service processes untrusted input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27904"
},
{
"category": "external",
"summary": "RHBZ#2442922",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2442922"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27904",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27904"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27904",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27904"
},
{
"category": "external",
"summary": "https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74",
"url": "https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74"
}
],
"release_date": "2026-02-26T01:07:42.693000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions"
},
{
"cve": "CVE-2026-27942",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-02-26T03:01:53.367202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2442938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-xml-parser. A user can exploit this flaw by processing specially crafted XML data with the XML builder when the `preserveOrder` option is enabled. This can lead to a stack overflow, causing the application to crash and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-xml-parser: fast-xml-parser: Stack overflow leads to Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The flaw affects the XML builder component of the fast-xml-parser library and is triggered only when the preserveOrder option is explicitly enabled. In Red Hat\u2013shipped configurations, this option is not enabled by default, and the vulnerable code path is therefore not exercised under typical deployments.\nThe underlying issue results in uncontrolled recursion leading to a stack overflow condition, which causes the application to terminate unexpectedly. While this can be triggered via crafted input, the impact is limited strictly to denial of service (DoS) and does not provide a mechanism for arbitrary code execution, privilege escalation, or data disclosure.\nFurthermore, exploitation requires that the affected application processes attacker-controlled XML input through the XML builder functionality with the specific vulnerable configuration enabled. This significantly reduces the attack surface and introduces environmental constraints not considered in the generalized NVD scoring.\n\nGiven the absence of confidentiality and integrity impact, the requirement for non-default configuration, and the limitation of the impact to process termination, Red Hat considers the practical risk to be lower than the NVD assessment. As such, this issue is classified as Moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27942"
},
{
"category": "external",
"summary": "RHBZ#2442938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2442938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27942",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27942"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27942",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27942"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/c13a961910f14986295dd28484eee830fa1a0e8a",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/c13a961910f14986295dd28484eee830fa1a0e8a"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/pull/791",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/pull/791"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-fj3w-jwp8-x2g3",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-fj3w-jwp8-x2g3"
}
],
"release_date": "2026-02-26T01:22:11.383000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, configure applications using the `fast-xml-parser` XML builder to set the `preserveOrder` option to `false`. Alternatively, ensure that all XML input data is thoroughly validated before being passed to the builder to prevent the processing of malicious or malformed content.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "fast-xml-parser: fast-xml-parser: Stack overflow leads to Denial of Service"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-33036",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-03-20T06:02:18.306021+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449458"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-xml-parser. A remote attacker can exploit this vulnerability by supplying specially crafted XML input containing numeric character references or standard XML entities. This input can bypass configured entity expansion limits, leading to excessive memory allocation and high CPU usage. The primary consequence is a Denial of Service (DoS), which can crash the affected process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-xml-parser: fast-xml-parser: Denial of Service via XML entity expansion bypass",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33036"
},
{
"category": "external",
"summary": "RHBZ#2449458",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449458"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33036",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33036"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33036",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33036"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/bd26122c838e6a55e7d7ac49b4ccc01a49999a01",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/commit/bd26122c838e6a55e7d7ac49b4ccc01a49999a01"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.5.6",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.5.6"
},
{
"category": "external",
"summary": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-8gc5-j5rx-235r",
"url": "https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-8gc5-j5rx-235r"
}
],
"release_date": "2026-03-20T05:17:03.290000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "fast-xml-parser: fast-xml-parser: Denial of Service via XML entity expansion bypass"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-48779",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-16T22:01:24.571224+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489661"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `ws` WebSocket library. A remote attacker can exploit this flaw by sending a high volume of small, fragmented data, leading to excessive memory consumption and subsequent process termination. This can result in service disruption for Red Hat products that utilize `ws` for WebSocket communication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"known_not_affected": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "RHBZ#2489661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48779"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7",
"url": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53",
"url": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94",
"url": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8",
"url": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p"
}
],
"release_date": "2026-06-16T21:26:22.537000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T09:45:40+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-operator-bundle@sha256:abcce35db8c70c8abf62ca0597cb146e89bf5b612657ef91570a2cc852439fb5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:0452d41383814479aac36c6ec8795b3090980515df082a12ee159ee0c8499d43_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:1b171c07727e481188f94c64274de908f4c3830a0fd147ebb1f5fc0cc1c1db8e_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:a3efc8ba6ae18b5dfe9b7bafadaf1b17458c1d27803e3d7ac8b44013f72324be_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f37fca7a5b057f5f1f76bb806897c9f5ec53e59c680f60ce53192485f7dfe299_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:1a5031d59dee5a81dc17c504934f6f66559e509d124c181f90cc17625af6acfa_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:56398670eee80b5043e77106b9ee769a584872de5baffd7159d6cffd13d24b4f_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/cephcsi-rhel9@sha256:62dd37ed631205c855b9438396987008c5db68cbaa6d61eee4cdf2c5ddc2856b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:1d500daeede9db67f65122ca2b9ba9275fd9308c02f5157a42d054ee91ae63b4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:4d868a7f6a72d014d195c7e884fe7fbc5901277c6e9d44201fb0cbe6b3901fef_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-core-rhel9@sha256:9ece51fa5ecca9ca932c01b356dea548461b0215a0d9505b2ed27f33341afe91_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-operator-bundle@sha256:8799e3b3750d0ac29c1e90890906d2b8c054d98158abc24820083d37ed4b6e67_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:3bcee80f0b87bcec3675f6b7071a7664497bfa40030f5f136dd2fd43950d5a14_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:49f8bf233b7b34253100e17f2c6a9f45840c80580300b346062237e10f567229_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:5a736355093b69a46c84ce278649172e86b2850102484468368293809a2a9f0d_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/mcg-rhel9-operator@sha256:69aa396ebfa0df5415ae4af6bc7d5f8f42130a31f5df1b5add3712a12cd9f070_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:2b22fe58e02abb82570514aeab6b27cb46e1322cfa71f90162cac8924d40521c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:661d80cfdb84ccb131dbfc8737aa25678154366e7cba4f4d5cf5fbe798e412a4_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:7685f06c00e5e56fff3d20c385858b6d718511da7a69e2b2429a85e7c859fc0a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:9af545ce1fb2a8147adbe3527177dc5bf0d25a9a5561a95cf6a55e07fae0df28_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:4aebc13f5cd723576220952bcc11b3ac4e975f40693ebb130d085aaed1183d60_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:0d5c7466f9cbbb78608c772edb33c6a6ce5faa0d2a22883720de4a8707ae1f43_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:723d090cf363d0426721287b911a222b790a80d99a2d4ea5516bd74fa58d6a42_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:b7691d3c8da4a4d437b5dd6833da28365f7fbfdea38acd75455653d566f61038_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:f522f342007686ff281d6cb0ab224915a385c6970fdbe2601eb3642890ebef32_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:33687dcd95f5586f4f60d1fd91c817c54ded0b1a31dfa6abb28390c1388587c7_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:4a4b87985482dc88804daeb5a32f3ff6c43b3769118e323a49be2c9c0af59ca3_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:837e1ccb1727486dd70268b34b86c894371101a24c5284b2a6f7d392d851e6f2_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:963032931c6df46888db0d16ddac52d41f346c5ddc3c0639c1e730ef286c9361_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-operator-bundle@sha256:1ffd029e64f72ced5fdf82e033263904a0fd4631d205b38148d48b1f3d53b3fb_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:02f9885d4766fc5f972680bcdeeaa2ec97ee342e57404d02c9abf9aa46a57faf_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1e9c0921486c4e4c0e51d14dc3d593f66834e68790769b005793ac62d1d30f6a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:68b4509de284a6e1ffa40062b8ca723bdf9822bd511ceab44d366f4d2d38594d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/ocs-rhel9-operator@sha256:9abbd876e63cac7e91705ad161c42dba455fbfc00b4d47c06ecb7264cafcd701_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:0055f9766422527a311da33c76e1bc2af6a5ce35521b944714a19222a5af5cf5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:3750fe47799f1138c6e4412aab93af74afd0aa0991bdcb53bf306dc93750af15_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:8f6286f72f8ada29293b54de8c5e4f19c23fd783cec0ec070ee88b88ad8ecd60_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cli-rhel9@sha256:ced373dfa54ec73c04c761509e7416d3b943781dd59ae82d2985cc503e4becbb_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:17e4d4768e043a2ed9e2cb5b040f53d1953ba5c4ca02446a5991ecef0dce7150_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:43e542f7517a4652e86d89f2d09cbe713ff6f09b0f8c45e2d89e5b151ce44e92_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:5a4cccbc3330c16be62ad89f4d1703aa153354a7de084ec590df8849d17187f8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cloudnative-pg-rhel9-operator@sha256:7f978b0f5f4b7dda7e80d55f76546b83ea09f3900649683383e9d5037bd42943_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:00f299a603bc39e8ff4ccdf71b66f0982fc2f7cf2083fc309684eba903c96328_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:5f2fcf92bc29f8d3ddca3a0d7fe79e6a1dbd95637232a0640e215ce2c3b634ca_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:bd3b1b42631329d104fc675937f4e6c5c369ef7f0ff42396f7d3fa02a2ef79e5_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-console-rhel9@sha256:e68e2721811afe8187e47fd53f7a22a381e86c9b666ac4fd147d8a1d7c119439_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:8528d12ffe21e277e2cd47a035c2c6244fd290757ec0d33dff86dfe2ea063d77_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:99c856bbb97758c50f311c30dfab5ce718acbb6c1513ca6928a2aa9bf961ca8f_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:9cef674466670218bc1486d83cba89b8780cf8862bb47688bac2ab79168d0623_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:de17f954f6baf170b8b657df6663c12801110242405eacb3bced6594403e3b06_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:0cef8e64783921f199dcd3a9236768177999fc75adcddb174e3697f82fc1e55a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:3827399f327f72dc0255c1e95706b6be0f0e4e22bb628dd4566e9686a9c3793b_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:d51126f5eb7e3abc7a83625517bda16fe91c2d939bf6f6a25969830f0bb68a10_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:ed752e684c9eb8f367bf2b2445c2691f9ad7d8315bc3f6eda456f55542e90c67_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:f25d2c8976badbd8fe5971a2526bdee6aa4e8e0b0ccb49a988ab393adebd0f32_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:19be4a06523aef8d872e1db808660217133722990017e8df098ef25b905df6d5_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:4bbd3bdf70225de8321d9b5992aa5718a0234809e793afa23d93b76e20f84ce0_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b472f9cc8239ea1a930dce005e959bd9526026f961c3fe410d6bed3e02d9b75_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:d6bedc46bb93867093a462fda2454a3f41c2faf967aadc108ad3c569368dba0d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:a2af1edb0f22453760f259d73f3bc9b18dcdd1a83fbd0151e0a0a01674a4fbc8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:3dafe49c135e513d4896ded16b96205bfac481a240430afe0b0c954234c8c635_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:780c913cb0d74ba0b53c26c1ab8ec1db08d30dad010d1d29d4bf80c07cb45c8a_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:dd210144b0a8e8e881ae3f7ee971e178f24534e2bdd1c2b695d01381ebec86a0_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:e193b5e161263799c50e282a8dfed8e615c4284cae7ac9a2a1c4cf70e721082a_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:8b978fdbdc28f8d679e3efb87397f214ca540b5c259d9f0bad95b679af9dc104_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:2ac62758ebcf7e997e370c27454c5fc5f2eddea690f2ae0905bb2946ea4b45eb_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:62b21534723ee44f282456972e59b8470f20d2562542e7542dd06368046c477e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:63e3f7d4fcb1625ac7a006c9b4d9532b7dd622fe473b4f29d930ef1858340be9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:ae125b96927593309094e22e351c03ce0791e46116beda31fdc4cd9d24559680_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:179e552aef0380b875c5d1594d33e2293a86061d2e3a303b8ed8dcb053d9561b_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:813b8e6ee14efb816819919a92499309507fa0f363394f7ab4cdc69e85c9dc1f_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:a754f3302e9a7feaebd903399325f64266c69d3baa9fd1f20c32e474201d5fc6_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-must-gather-rhel9@sha256:ba6ca41d0001b0c3197ace6b6697834ab67a53e9405d0e8eada7d162f811f081_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-operator-bundle@sha256:a39a9fa0f851bb3a7d87de3026d6b9a3800905e2ab5346e768035938f46f210c_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-prometheus-operator-bundle@sha256:6e72a5c55a9629cb0ed303c81d76959ff93169c962b8ecfb0c71e09139b3a214_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:8367982af18c21eb6f30f0025d7b07cdc1aba78e3d51d5952822e95a30eb874e_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:d61b07989d1c5e7a0167f4441c0602701542514ef261c837fe0233e1c08186c7_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e46d84b89884972da153505ee4ba1a18d36aeca69f9c213725a91b12b0359842_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odf-rhel9-operator@sha256:e88f74e9cdae3397fc5e08e10fa5c137acc66b62315c40ed7fa4241cd01c9514_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-cluster-operator-bundle@sha256:3a59ed5ea35fc84dcd09b9c659da9d370d7afb7073ad536ae0b723f23a8c2ce5_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:a2b42e2145a8b5f3e4845e9239fdf4eab202f7f75b58b5330f1d5bfb00ccb42a_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-recipe-operator-bundle@sha256:f24bebe1a31d1abc49e3a66cc95592dbc8e30007b5e04b6df1aa7fd734832377_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:16026b39e11fdfcd3b833d45a9fbee06698e6be8e646656eee4a72af36f59c4b_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:2bfb3997ae6f47def50b15c86c4bce8cab7367d7ad7242f7526904a65cc25b05_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:924f5a5451ec1bc694b389b60d9c1464346e5d145280542c4cc30e4966e491d6_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/odr-rhel9-operator@sha256:9c1379b1b4695345d9ae679f747be1ba678b44074d919ec3098d3809274bb82d_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-operator-bundle@sha256:61b183fbd40517f924f02099be02bf6a3a0c96a9a5bfee8d3d091dc7961074a8_amd64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:0955cf17d0add0a6f3e236589de44b244e58db4f521db079117d43c23dceadb9_arm64",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:4e12426e4cf6cbc5f9d16c98f3529a15db39029bc23addee83af1445d581a833_s390x",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:5a7c90743c5c396516c4db28b6f10d1fc1bb628378f46197e8f1d5b8c5630f86_ppc64le",
"Red Hat Openshift Data Foundation 4.19:registry.redhat.io/odf4/rook-ceph-rhel9-operator@sha256:694b4f64bcd94f45a766a5458d4c47e87796cab92225b0cacce2509f975bb8d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments"
}
]
}
RHSA-2026:6428
Vulnerability from csaf_redhat - Published: 2026-04-02 07:50 - Updated: 2026-08-10 21:21Summary
Red Hat Security Advisory: Network Observability 1.11.1 for OpenShift
Severity
Important
Notes
Topic: Network Observability 1.11 for Red Hat OpenShift.
Details: Network flows collector and monitoring solution.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the archive/zip package in the Go standard library. A super-linear file name indexing algorithm is used in the first time a file in an archive is opened. A crafted zip archive containing a specific arrangement of file names can cause an excessive CPU and memory consumption. A Go application processing a malicious archive can become unresponsive or crash, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x | — |
Vendor Fix
fix
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64 | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64 | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64 | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64 | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64 | — |
Threats
Impact
Important
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le | — |
Vendor Fix
fix
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64 | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64 | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64 | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64 | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64 | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64 | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64 | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64 | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64 | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64 | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64 | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x | — |
Threats
Impact
Moderate
A denial of service flaw has been discovered in the Axios npm package. the mergeConfig function in axios crashes with a TypeError when processing configuration objects containing __proto__ as an own property. An attacker can trigger this by providing a malicious configuration object created via JSON.parse(), causing complete denial of service.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in node-tar. An attacker can craft a malicious archive that, when extracted with default options, creates a hardlink outside the intended extraction directory. This vulnerability allows the attacker to perform arbitrary file read and write operations as the user extracting the archive, bypassing existing path protections. This can lead to unauthorized access and modification of sensitive system files.
7.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x | — |
Vendor Fix
fix
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64 | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64 | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64 | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64 | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64 | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64 | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64 | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64 | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64 | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64 | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64 | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le | — | ||
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x | — |
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64 | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x | — |
Workaround
|
|
| Unresolved product id: Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64 | — |
Workaround
|
Threats
Impact
Important
References
70 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Network Observability 1.11 for Red Hat OpenShift.",
"title": "Topic"
},
{
"category": "general",
"text": "Network flows collector and monitoring solution.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:6428",
"url": "https://access.redhat.com/errata/RHSA-2026:6428"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61726",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61728",
"url": "https://access.redhat.com/security/cve/CVE-2025-61728"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61729",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25639",
"url": "https://access.redhat.com/security/cve/CVE-2026-25639"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-26960",
"url": "https://access.redhat.com/security/cve/CVE-2026-26960"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.openshift.com/container-platform/latest/observability/network_observability/network-observability-operator-release-notes.html",
"url": "https://docs.openshift.com/container-platform/latest/observability/network_observability/network-observability-operator-release-notes.html"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_6428.json"
}
],
"title": "Red Hat Security Advisory: Network Observability 1.11.1 for OpenShift",
"tracking": {
"current_release_date": "2026-08-10T21:21:18+00:00",
"generator": {
"date": "2026-08-10T21:21:18+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHSA-2026:6428",
"initial_release_date": "2026-04-02T07:50:38+00:00",
"revision_history": [
{
"date": "2026-04-02T07:50:38+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-10T21:21:18+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Network Observability (NETOBSERV) 1.11.2",
"product": {
"name": "Network Observability (NETOBSERV) 1.11.2",
"product_id": "Network Observability (NETOBSERV) 1.11.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:network_observ_optr:1.11::el9"
}
}
}
],
"category": "product_family",
"name": "Network Observability (NETOBSERV)"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64",
"product": {
"name": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64",
"product_id": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/network-observability-flowlogs-pipeline-rhel9@sha256%3A7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a?arch=amd64\u0026repository_url=registry.redhat.io/network-observability\u0026tag=1773997913"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64",
"product": {
"name": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64",
"product_id": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/network-observability-ebpf-agent-rhel9@sha256%3A2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f?arch=amd64\u0026repository_url=registry.redhat.io/network-observability\u0026tag=1774887582"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64",
"product": {
"name": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64",
"product_id": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64",
"product_identification_helper": {
"purl": "pkg:oci/network-observability-cli-rhel9@sha256%3A30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40?arch=amd64\u0026repository_url=registry.redhat.io/network-observability\u0026tag=1773992622"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64",
"product": {
"name": "registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64",
"product_id": "registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/network-observability-console-plugin-compat-rhel9@sha256%3A40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b?arch=amd64\u0026repository_url=registry.redhat.io/network-observability\u0026tag=1774431392"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64",
"product": {
"name": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64",
"product_id": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64",
"product_identification_helper": {
"purl": "pkg:oci/network-observability-console-plugin-rhel9@sha256%3A3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152?arch=amd64\u0026repository_url=registry.redhat.io/network-observability\u0026tag=1774431617"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64",
"product": {
"name": "registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64",
"product_id": "registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64",
"product_identification_helper": {
"purl": "pkg:oci/network-observability-operator-bundle@sha256%3A325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607?arch=amd64\u0026repository_url=registry.redhat.io/network-observability\u0026tag=1774962696"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64",
"product": {
"name": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64",
"product_id": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64",
"product_identification_helper": {
"purl": "pkg:oci/network-observability-rhel9-operator@sha256%3A13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122?arch=amd64\u0026repository_url=registry.redhat.io/network-observability\u0026tag=1774859742"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64",
"product": {
"name": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64",
"product_id": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/network-observability-flowlogs-pipeline-rhel9@sha256%3A5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3?arch=arm64\u0026repository_url=registry.redhat.io/network-observability\u0026tag=1773997913"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64",
"product": {
"name": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64",
"product_id": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64",
"product_identification_helper": {
"purl": "pkg:oci/network-observability-ebpf-agent-rhel9@sha256%3Adc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518?arch=arm64\u0026repository_url=registry.redhat.io/network-observability\u0026tag=1774887582"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64",
"product": {
"name": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64",
"product_id": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64",
"product_identification_helper": {
"purl": "pkg:oci/network-observability-cli-rhel9@sha256%3A05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd?arch=arm64\u0026repository_url=registry.redhat.io/network-observability\u0026tag=1773992622"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64",
"product": {
"name": "registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64",
"product_id": "registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/network-observability-console-plugin-compat-rhel9@sha256%3A115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8?arch=arm64\u0026repository_url=registry.redhat.io/network-observability\u0026tag=1774431392"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64",
"product": {
"name": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64",
"product_id": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64",
"product_identification_helper": {
"purl": "pkg:oci/network-observability-console-plugin-rhel9@sha256%3A1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1?arch=arm64\u0026repository_url=registry.redhat.io/network-observability\u0026tag=1774431617"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64",
"product": {
"name": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64",
"product_id": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/network-observability-rhel9-operator@sha256%3A4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d?arch=arm64\u0026repository_url=registry.redhat.io/network-observability\u0026tag=1774859742"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le",
"product": {
"name": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le",
"product_id": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/network-observability-flowlogs-pipeline-rhel9@sha256%3A791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4?arch=ppc64le\u0026repository_url=registry.redhat.io/network-observability\u0026tag=1773997913"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le",
"product": {
"name": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le",
"product_id": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/network-observability-ebpf-agent-rhel9@sha256%3A9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708?arch=ppc64le\u0026repository_url=registry.redhat.io/network-observability\u0026tag=1774887582"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le",
"product": {
"name": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le",
"product_id": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/network-observability-cli-rhel9@sha256%3Ab0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80?arch=ppc64le\u0026repository_url=registry.redhat.io/network-observability\u0026tag=1773992622"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le",
"product": {
"name": "registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le",
"product_id": "registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/network-observability-console-plugin-compat-rhel9@sha256%3A03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4?arch=ppc64le\u0026repository_url=registry.redhat.io/network-observability\u0026tag=1774431392"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le",
"product": {
"name": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le",
"product_id": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/network-observability-console-plugin-rhel9@sha256%3A222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768?arch=ppc64le\u0026repository_url=registry.redhat.io/network-observability\u0026tag=1774431617"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le",
"product": {
"name": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le",
"product_id": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/network-observability-rhel9-operator@sha256%3Ab5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae?arch=ppc64le\u0026repository_url=registry.redhat.io/network-observability\u0026tag=1774859742"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x",
"product": {
"name": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x",
"product_id": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x",
"product_identification_helper": {
"purl": "pkg:oci/network-observability-flowlogs-pipeline-rhel9@sha256%3Aa72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088?arch=s390x\u0026repository_url=registry.redhat.io/network-observability\u0026tag=1773997913"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x",
"product": {
"name": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x",
"product_id": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x",
"product_identification_helper": {
"purl": "pkg:oci/network-observability-ebpf-agent-rhel9@sha256%3A880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8?arch=s390x\u0026repository_url=registry.redhat.io/network-observability\u0026tag=1774887582"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x",
"product": {
"name": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x",
"product_id": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/network-observability-cli-rhel9@sha256%3Aa90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3?arch=s390x\u0026repository_url=registry.redhat.io/network-observability\u0026tag=1773992622"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x",
"product": {
"name": "registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x",
"product_id": "registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x",
"product_identification_helper": {
"purl": "pkg:oci/network-observability-console-plugin-compat-rhel9@sha256%3A17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175?arch=s390x\u0026repository_url=registry.redhat.io/network-observability\u0026tag=1774431392"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x",
"product": {
"name": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x",
"product_id": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/network-observability-console-plugin-rhel9@sha256%3A51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c?arch=s390x\u0026repository_url=registry.redhat.io/network-observability\u0026tag=1774431617"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x",
"product": {
"name": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x",
"product_id": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x",
"product_identification_helper": {
"purl": "pkg:oci/network-observability-rhel9-operator@sha256%3Adc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453?arch=s390x\u0026repository_url=registry.redhat.io/network-observability\u0026tag=1774859742"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64 as a component of Network Observability (NETOBSERV) 1.11.2",
"product_id": "Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64"
},
"product_reference": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64",
"relates_to_product_reference": "Network Observability (NETOBSERV) 1.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64 as a component of Network Observability (NETOBSERV) 1.11.2",
"product_id": "Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64"
},
"product_reference": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64",
"relates_to_product_reference": "Network Observability (NETOBSERV) 1.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x as a component of Network Observability (NETOBSERV) 1.11.2",
"product_id": "Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x"
},
"product_reference": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x",
"relates_to_product_reference": "Network Observability (NETOBSERV) 1.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le as a component of Network Observability (NETOBSERV) 1.11.2",
"product_id": "Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le"
},
"product_reference": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le",
"relates_to_product_reference": "Network Observability (NETOBSERV) 1.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le as a component of Network Observability (NETOBSERV) 1.11.2",
"product_id": "Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le"
},
"product_reference": "registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le",
"relates_to_product_reference": "Network Observability (NETOBSERV) 1.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64 as a component of Network Observability (NETOBSERV) 1.11.2",
"product_id": "Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64"
},
"product_reference": "registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64",
"relates_to_product_reference": "Network Observability (NETOBSERV) 1.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x as a component of Network Observability (NETOBSERV) 1.11.2",
"product_id": "Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x"
},
"product_reference": "registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x",
"relates_to_product_reference": "Network Observability (NETOBSERV) 1.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64 as a component of Network Observability (NETOBSERV) 1.11.2",
"product_id": "Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64"
},
"product_reference": "registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64",
"relates_to_product_reference": "Network Observability (NETOBSERV) 1.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64 as a component of Network Observability (NETOBSERV) 1.11.2",
"product_id": "Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64"
},
"product_reference": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64",
"relates_to_product_reference": "Network Observability (NETOBSERV) 1.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le as a component of Network Observability (NETOBSERV) 1.11.2",
"product_id": "Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le"
},
"product_reference": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le",
"relates_to_product_reference": "Network Observability (NETOBSERV) 1.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64 as a component of Network Observability (NETOBSERV) 1.11.2",
"product_id": "Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64"
},
"product_reference": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64",
"relates_to_product_reference": "Network Observability (NETOBSERV) 1.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x as a component of Network Observability (NETOBSERV) 1.11.2",
"product_id": "Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x"
},
"product_reference": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x",
"relates_to_product_reference": "Network Observability (NETOBSERV) 1.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64 as a component of Network Observability (NETOBSERV) 1.11.2",
"product_id": "Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64"
},
"product_reference": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64",
"relates_to_product_reference": "Network Observability (NETOBSERV) 1.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x as a component of Network Observability (NETOBSERV) 1.11.2",
"product_id": "Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x"
},
"product_reference": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x",
"relates_to_product_reference": "Network Observability (NETOBSERV) 1.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le as a component of Network Observability (NETOBSERV) 1.11.2",
"product_id": "Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le"
},
"product_reference": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le",
"relates_to_product_reference": "Network Observability (NETOBSERV) 1.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64 as a component of Network Observability (NETOBSERV) 1.11.2",
"product_id": "Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64"
},
"product_reference": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64",
"relates_to_product_reference": "Network Observability (NETOBSERV) 1.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64 as a component of Network Observability (NETOBSERV) 1.11.2",
"product_id": "Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64"
},
"product_reference": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64",
"relates_to_product_reference": "Network Observability (NETOBSERV) 1.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le as a component of Network Observability (NETOBSERV) 1.11.2",
"product_id": "Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le"
},
"product_reference": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le",
"relates_to_product_reference": "Network Observability (NETOBSERV) 1.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64 as a component of Network Observability (NETOBSERV) 1.11.2",
"product_id": "Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64"
},
"product_reference": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64",
"relates_to_product_reference": "Network Observability (NETOBSERV) 1.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x as a component of Network Observability (NETOBSERV) 1.11.2",
"product_id": "Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x"
},
"product_reference": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x",
"relates_to_product_reference": "Network Observability (NETOBSERV) 1.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64 as a component of Network Observability (NETOBSERV) 1.11.2",
"product_id": "Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64"
},
"product_reference": "registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64",
"relates_to_product_reference": "Network Observability (NETOBSERV) 1.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64 as a component of Network Observability (NETOBSERV) 1.11.2",
"product_id": "Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64"
},
"product_reference": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64",
"relates_to_product_reference": "Network Observability (NETOBSERV) 1.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64 as a component of Network Observability (NETOBSERV) 1.11.2",
"product_id": "Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64"
},
"product_reference": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64",
"relates_to_product_reference": "Network Observability (NETOBSERV) 1.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le as a component of Network Observability (NETOBSERV) 1.11.2",
"product_id": "Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le"
},
"product_reference": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le",
"relates_to_product_reference": "Network Observability (NETOBSERV) 1.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x as a component of Network Observability (NETOBSERV) 1.11.2",
"product_id": "Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x"
},
"product_reference": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x",
"relates_to_product_reference": "Network Observability (NETOBSERV) 1.11.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-61726",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:42.791305+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x"
],
"known_not_affected": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "RHBZ#2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://go.dev/cl/736712",
"url": "https://go.dev/cl/736712"
},
{
"category": "external",
"summary": "https://go.dev/issue/77101",
"url": "https://go.dev/issue/77101"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4341",
"url": "https://pkg.go.dev/vuln/GO-2026-4341"
}
],
"release_date": "2026-01-28T19:30:31.215000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-02T07:50:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6428"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"
},
{
"cve": "CVE-2025-61728",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:39.965024+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434431"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the archive/zip package in the Go standard library. A super-linear file name indexing algorithm is used in the first time a file in an archive is opened. A crafted zip archive containing a specific arrangement of file names can cause an excessive CPU and memory consumption. A Go application processing a malicious archive can become unresponsive or crash, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to be able to process a malicious zip archive with an application using the archive/zip package. Additionally, this vulnerability can cause a Go application to consume an excessive amount of CPU and memory, eventually resulting in a denial of service with no other security impact. Due to these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x"
],
"known_not_affected": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61728"
},
{
"category": "external",
"summary": "RHBZ#2434431",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434431"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61728",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61728"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61728",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61728"
},
{
"category": "external",
"summary": "https://go.dev/cl/736713",
"url": "https://go.dev/cl/736713"
},
{
"category": "external",
"summary": "https://go.dev/issue/77102",
"url": "https://go.dev/issue/77102"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4342",
"url": "https://pkg.go.dev/vuln/GO-2026-4342"
}
],
"release_date": "2026-01-28T19:30:31.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-02T07:50:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6428"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, implement a timeout in your archive/zip processing logic to abort the operation if it exceeds a few seconds, preventing the application from consuming an excessive amount of resources.",
"product_ids": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x"
],
"known_not_affected": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-02T07:50:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6428"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le"
],
"known_not_affected": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-02T07:50:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6428"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2026-25639",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"discovery_date": "2026-02-09T21:00:49.280114+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2438237"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw has been discovered in the Axios npm package. the mergeConfig function in axios crashes with a TypeError when processing configuration objects containing __proto__ as an own property. An attacker can trigger this by providing a malicious configuration object created via JSON.parse(), causing complete denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios affected by Denial of Service via __proto__ Key in mergeConfig",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x"
],
"known_not_affected": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25639"
},
{
"category": "external",
"summary": "RHBZ#2438237",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2438237"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25639",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25639"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25639",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25639"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/28c721588c7a77e7503d0a434e016f852c597b57",
"url": "https://github.com/axios/axios/commit/28c721588c7a77e7503d0a434e016f852c597b57"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.13.5",
"url": "https://github.com/axios/axios/releases/tag/v1.13.5"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-43fc-jf86-j433",
"url": "https://github.com/axios/axios/security/advisories/GHSA-43fc-jf86-j433"
}
],
"release_date": "2026-02-09T20:11:22.374000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-02T07:50:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6428"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios affected by Denial of Service via __proto__ Key in mergeConfig"
},
{
"cve": "CVE-2026-26960",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-02-20T02:01:07.883769+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2441253"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in node-tar. An attacker can craft a malicious archive that, when extracted with default options, creates a hardlink outside the intended extraction directory. This vulnerability allows the attacker to perform arbitrary file read and write operations as the user extracting the archive, bypassing existing path protections. This can lead to unauthorized access and modification of sensitive system files.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-tar: node-tar: Arbitrary file read/write via malicious archive hardlink creation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In Red Hat environments, this condition introduces a significant constraint, as exploitation requires user interaction and reliance on unsafe handling of externally supplied archives. The attack is not remotely exploitable in isolation and depends on a user or service processing attacker-controlled input.\n\nFurthermore, the impact of the vulnerability is limited to the privileges of the extracting process. In typical Red Hat deployments, archive extraction is performed by non-privileged users or within confined environments such as containers or restricted service contexts, which limits the scope of potential damage.\n\nRed Hat analysis also notes that this issue does not provide a direct mechanism for code execution or privilege escalation, but rather enables file system manipulation within the boundaries of the executing user\u2019s permissions.\n\nGiven the requirement for user-assisted exploitation, the absence of a direct remote attack vector, and the confinement of impact to the privileges of the extracting process, Red Hat considers the practical risk to be lower than the generalized NVD assessment. As a result, this vulnerability is classified as Moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x"
],
"known_not_affected": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-26960"
},
{
"category": "external",
"summary": "RHBZ#2441253",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2441253"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-26960",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-26960"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-26960",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26960"
},
{
"category": "external",
"summary": "https://github.com/isaacs/node-tar/commit/2cb1120bcefe28d7ecc719b41441ade59c52e384",
"url": "https://github.com/isaacs/node-tar/commit/2cb1120bcefe28d7ecc719b41441ade59c52e384"
},
{
"category": "external",
"summary": "https://github.com/isaacs/node-tar/commit/d18e4e1f846f4ddddc153b0f536a19c050e7499f",
"url": "https://github.com/isaacs/node-tar/commit/d18e4e1f846f4ddddc153b0f536a19c050e7499f"
},
{
"category": "external",
"summary": "https://github.com/isaacs/node-tar/security/advisories/GHSA-83g3-92jg-28cx",
"url": "https://github.com/isaacs/node-tar/security/advisories/GHSA-83g3-92jg-28cx"
}
],
"release_date": "2026-02-20T01:07:52.979000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-02T07:50:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6428"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "node-tar: node-tar: Arbitrary file read/write via malicious archive hardlink creation"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x"
],
"known_not_affected": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-02T07:50:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6428"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x"
],
"known_not_affected": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-02T07:50:38+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6428"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:05ced6a12abb5c6156d57cde83a5515f1ba1ae4b4876c20df8e87acf658b55cd_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:30a1eceb88756d6bd6b2a523f4c763e2c17491d921e709b49065c8e1827e7e40_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:a90dd2247b3167d97fae23047e0dadb711b870a402fb6ae1460928e187a4a1f3_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b0f982a4b0cf36578c2483d9487e6c6f0343043737e01b6dd1b61778ed915e80_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:03f45691cb47a4afd19a4bb61704f1c38cc6f0fb9f7bcacf4ed3070eecdc02b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:115254a3a9f613fbcec875c7e515b638da1e046f6dff8bcb0ce8aeb7bd3bcbb8_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:17faaf94edcd7636ece30fcc7372bdabdc66c5d443b1132c9a15ef6823f57175_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9@sha256:40512734417b0b3555046f6034e20dc9d834819bb83dbc2e6240bd656a4b2b3b_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:1b0ed12930e073b9d9f10856abd1bf78366123a7c46d0365395ae9ffaccb8cd1_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:222e5ccbdcee7fcddfceda87216a63ea8aa46efdde0171fd1ba58b5c1e020768_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:3452169eaaeda28a490561e93089374a5e306868e221f68c14dc623de532f152_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:51765514b5b6d1d205a26ad50893d11284256dd0afbd7603370c92242012973c_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:2f23661c41345f7e7625d961649fdc4432e5e9b546ca807dc50c1b685480d44f_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:880119c62568c07d28fcedfe545b92cb6e4b9e11ffb79f8405214a4810f931f8_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:9d6bc518588793ff607a20fd94a181c7028c1f7a938b713253bfddef3fbac708_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dc9c1e367526c7a2bae9694c253909f6716be82f89d1ceb9dc3a38528120d518_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:5218256abd119c47e49511a207521013f4e70873f5e1695cd33c7acb236167a3_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:791b6dff77ede837fe03220d73511632b719e3c9668ef1a4a7766c2c9c8fe4b4_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7e2463af3ff443c98adf0bbfe349c7d9da90c8de34892e41b46627f30623b47a_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:a72d7f075a569e1c0ba055ca748f04fa3c6ff889de498faba215174048b9b088_s390x",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:325f2d9688ef540088f75b450d209fb8dd6b7b2dfc006f492f7575f3e8678607_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:13ea96ec33fe631eea4970b4d05aaebb101d1e964047cc3cdd8e659eb1329122_amd64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4a717354ce0dfefb859c61b6088f9e51c9e1679892359ddcbe250697e723618d_arm64",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:b5778b60be17f7e849b5aff93df89735063e003c27c61bc03abd4b899542a7ae_ppc64le",
"Network Observability (NETOBSERV) 1.11.2:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:dc14db47fce0af17e02916369099477a584d52e113e20b47518007aa074b5453_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
}
]
}
RHSA-2026:6568
Vulnerability from csaf_redhat - Published: 2026-04-03 22:07 - Updated: 2026-08-10 21:21Summary
Red Hat Security Advisory: Red Hat Quay 3.15.4
Severity
Important
Notes
Topic: Red Hat Quay 3.15.4 is now available with bug fixes.
Details: Quay 3.15.4
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the encoding/gob package of the Golang standard library. Calling Decoder.Decoding, a message that contains deeply nested structures, can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the x/crypto/ssh go library. Applications and libraries that misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass. For example, an attacker may send public keys A and B and authenticate with A. PublicKeyCallback would be called only twice, first with A and then with B. A vulnerable application may then make authorization decisions based on key B, for which the attacker does not control the private key. The misuse of ServerConfig.PublicKeyCallback may cause an authorization bypass.
8.2 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. This flaw allows an attacker to craft input to the parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This issue can cause a denial of service.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le | — |
Threats
Impact
Important
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the archive/zip package in the Go standard library. A super-linear file name indexing algorithm is used in the first time a file in an archive is opened. A crafted zip archive containing a specific arrangement of file names can cause an excessive CPU and memory consumption. A Go application processing a malicious archive can become unresponsive or crash, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le | — |
Threats
Impact
Important
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le | — |
Threats
Impact
Moderate
A flaw was found in Authlib, a Python library used for building OAuth and OpenID Connect servers. The cache-backed state and request-token storage within Authlib is not securely linked to the user's initiating session. This vulnerability allows a remote attacker to exploit a Cross-Site Request Forgery (CSRF) by obtaining a valid state, which can lead to unauthorized actions being performed on behalf of the user.
5.7 (Medium)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in ajv. When the $data option is enabled, the value of the pattern keyword is passed directly to the JavaScript RegExp() constructor without sufficient validation. An attacker able to supply a malicious regular expression pattern can trigger a ReDoS (Regular Expression Denial of Service), causing the application to become unresponsive and resulting in a denial of service.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in jsrsasign. A remote attacker could exploit this vulnerability by providing specially crafted zero or negative inputs to the bnModInverse function within the BigInteger.modInverse implementation. This could lead to an infinite loop, causing a permanent denial of service (DoS) by hanging the process.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in jsrsasign. An attacker can exploit an incomplete comparison vulnerability in the getRandomBigIntegerZeroToMax and getRandomBigIntegerMinToMax functions. By manipulating incorrect comparison checks, an attacker can bias the Digital Signature Algorithm (DSA) nonces during signature generation. This allows the attacker to recover the private key, leading to a critical security compromise.
9.1 (Critical)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in jsrsasign. An attacker can exploit improper verification of cryptographic signatures by supplying malicious domain parameters during the Digital Signature Algorithm (DSA) validation process. This allows the attacker to forge DSA signatures or X.509 certificates, which would then be accepted as legitimate, potentially leading to unauthorized access or data manipulation.
8.2 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in jsrsasign. An attacker can exploit a missing cryptographic step in the Digital Signature Algorithm (DSA) signing process, specifically within the KJUR.crypto.DSA.signWithMessageHash function. By manipulating the signature generation to force specific values, the library emits an invalid signature without retrying. This vulnerability allows an attacker to recover the private key used for signing.
8.7 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in jsrsasign. A remote attacker can exploit an incorrect conversion between numeric types by providing a negative exponent to the `modPow` function. This vulnerability can force the computation of incorrect modular inverses, which ultimately allows an attacker to bypass signature verification.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A denial of service flaw has been discovered in the Axios npm package. the mergeConfig function in axios crashes with a TypeError when processing configuration objects containing __proto__ as an own property. An attacker can trigger this by providing a malicious configuration object created via JSON.parse(), causing complete denial of service.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found the Pillow Python imaging library. Providing a specially crafted PSD image may lead to an out-of-bounds write. This could potentially allow for arbitrary code execution or information disclosure.
7.3 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A validation flaw has been discovered in the python cryptography package. This missing validation allows an attacker to provide a public key point P from a small-order subgroup. This can lead to security issues in various situations, such as the most commonly used signature verification (ECDSA) and shared key negotiation (ECDH). When the victim computes the shared secret as S = [victim_private_key]P via ECDH, this leaks information about victim_private_key mod (small_subgroup_order). For curves with cofactor > 1, this reveals the least significant bits of the private key. When these weak public keys are used in ECDSA , it's easy to forge signatures on the small subgroup. Only SECT curves are impacted by this.
7.4 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in minimatch. A remote attacker could exploit this Regular Expression Denial of Service (ReDoS) vulnerability by providing a specially crafted glob pattern. This pattern, containing numerous consecutive wildcard characters, causes excessive processing and exponential backtracking in the regular expression engine. Successful exploitation leads to a Denial of Service (DoS), making the application unresponsive.
6.5 (Medium)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le | — |
Threats
Impact
Moderate
A flaw was found in pypdf. Processing a specially crafted PDF document, specifically with circular /Prev references in the cross-reference (xref) chain, can cause an infinite loop and a high consumption of CPU, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in minimatch. A remote attacker could exploit this vulnerability by providing a specially crafted glob expression with nested unbounded quantifiers. This could lead to catastrophic backtracking in the V8 JavaScript engine, causing the application to become unresponsive and resulting in a Denial of Service (DoS).
6.5 (Medium)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le | — |
Threats
Impact
Moderate
A flaw was found in Authlib, a Python library used for building OAuth and OpenID Connect (OIDC) servers. This vulnerability allows a remote attacker to bypass critical integrity checks in OIDC ID Tokens. Specifically, the library's internal hash verification logic fails open when encountering an unsupported cryptographic algorithm, accepting a forged ID Token as valid. This can lead to an authentication bypass, granting unauthorized access to systems relying on Authlib for OIDC authentication.
9.1 (Critical)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le | — |
Threats
Impact
Important
A flaw was found in Authlib, a Python library for building OAuth and OpenID Connect servers. A remote attacker can exploit this vulnerability by crafting a malicious JSON Web Token (JWT) with a "none" algorithm and an empty signature. This bypasses the expected signature verification, potentially allowing the attacker to forge tokens and gain unauthorized access or perform unauthorized actions within applications using Authlib.
9.1 (Critical)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le | — |
Threats
Impact
Important
A flaw was found in SVGO, an SVG (Scalable Vector Graphics) Optimizer. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML file. The application's failure to properly guard against XML entity expansion or recursion can lead to the Node.js process consuming excessive memory and crashing.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le | — |
Workaround
|
Threats
Impact
Important
An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A missing verification step has been discovered in PyJWT. PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. When a JWS token contains a crit array listing extensions that PyJWT does not understand, the library accepts the token instead of rejecting it. This violates the MUST requirement in the RFC.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le | — |
Workaround
|
Threats
Impact
Important
References
212 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Quay 3.15.4 is now available with bug fixes.",
"title": "Topic"
},
{
"category": "general",
"text": "Quay 3.15.4",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:6568",
"url": "https://access.redhat.com/errata/RHSA-2026:6568"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2024-34156",
"url": "https://access.redhat.com/security/cve/CVE-2024-34156"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2024-45337",
"url": "https://access.redhat.com/security/cve/CVE-2024-45337"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2024-45338",
"url": "https://access.redhat.com/security/cve/CVE-2024-45338"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61726",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61728",
"url": "https://access.redhat.com/security/cve/CVE-2025-61728"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61729",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68158",
"url": "https://access.redhat.com/security/cve/CVE-2025-68158"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69873",
"url": "https://access.redhat.com/security/cve/CVE-2025-69873"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25639",
"url": "https://access.redhat.com/security/cve/CVE-2026-25639"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25990",
"url": "https://access.redhat.com/security/cve/CVE-2026-25990"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-26007",
"url": "https://access.redhat.com/security/cve/CVE-2026-26007"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-26996",
"url": "https://access.redhat.com/security/cve/CVE-2026-26996"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27628",
"url": "https://access.redhat.com/security/cve/CVE-2026-27628"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27904",
"url": "https://access.redhat.com/security/cve/CVE-2026-27904"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-28498",
"url": "https://access.redhat.com/security/cve/CVE-2026-28498"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-28802",
"url": "https://access.redhat.com/security/cve/CVE-2026-28802"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29074",
"url": "https://access.redhat.com/security/cve/CVE-2026-29074"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-30922",
"url": "https://access.redhat.com/security/cve/CVE-2026-30922"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32597",
"url": "https://access.redhat.com/security/cve/CVE-2026-32597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4598",
"url": "https://access.redhat.com/security/cve/CVE-2026-4598"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4599",
"url": "https://access.redhat.com/security/cve/CVE-2026-4599"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4600",
"url": "https://access.redhat.com/security/cve/CVE-2026-4600"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4601",
"url": "https://access.redhat.com/security/cve/CVE-2026-4601"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4602",
"url": "https://access.redhat.com/security/cve/CVE-2026-4602"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_6568.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Quay 3.15.4",
"tracking": {
"current_release_date": "2026-08-10T21:21:19+00:00",
"generator": {
"date": "2026-08-10T21:21:19+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHSA-2026:6568",
"initial_release_date": "2026-04-03T22:07:28+00:00",
"revision_history": [
{
"date": "2026-04-03T22:07:28+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-10T21:21:19+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Quay 3.15",
"product": {
"name": "Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:quay:3.15::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Quay"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3A25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774980222"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774979159"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3Aebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774980224"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3Aa1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774979227"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1775183105"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1775227789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1775249999"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256%3Adec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1775250489"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3A26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774984603"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3Ac72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1775169219"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Acde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1774979159"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1774979227"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1775227789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1775249999"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3Ae5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1774984603"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3A8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1775169219"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Aee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1774979159"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3Ad6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1774979227"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1775227789"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1775249999"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3A8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1774984603"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3Abe166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1775169219"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-34156",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"discovery_date": "2024-09-06T21:20:09.377905+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2310528"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the encoding/gob package of the Golang standard library. Calling Decoder.Decoding, a message that contains deeply nested structures, can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in Go\u0027s `encoding/gob` package is of high severity because it exposes applications to potential Denial of Service (DoS) attacks through stack exhaustion. Since `gob` relies on recursive function calls to decode nested structures, an attacker could exploit this by sending crafted messages with excessively deep nesting, causing the application to panic due to stack overflow. This risk is particularly important in scenarios where untrusted or external input is processed, as it can lead to system unavailability or crashes, undermining the reliability and availability of services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-34156"
},
{
"category": "external",
"summary": "RHBZ#2310528",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310528"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-34156",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34156"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-34156",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34156"
},
{
"category": "external",
"summary": "https://go.dev/cl/611239",
"url": "https://go.dev/cl/611239"
},
{
"category": "external",
"summary": "https://go.dev/issue/69139",
"url": "https://go.dev/issue/69139"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-dev/c/S9POB9NCTdk",
"url": "https://groups.google.com/g/golang-dev/c/S9POB9NCTdk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2024-3106",
"url": "https://pkg.go.dev/vuln/GO-2024-3106"
}
],
"release_date": "2024-09-06T21:15:12.020000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-03T22:07:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6568"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion"
},
{
"cve": "CVE-2024-45337",
"cwe": {
"id": "CWE-285",
"name": "Improper Authorization"
},
"discovery_date": "2024-12-11T19:00:54.247490+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2331720"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the x/crypto/ssh go library. Applications and libraries that misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass. For example, an attacker may send public keys A and B and authenticate with A. PublicKeyCallback would be called only twice, first with A and then with B. A vulnerable application may then make authorization decisions based on key B, for which the attacker does not control the private key. The misuse of ServerConfig.PublicKeyCallback may cause an authorization bypass.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is classified as important rather than critical because it does not directly enable unauthorized access but rather introduces a risk of authorization bypass if the application or library misuses the PublicKeyCallback API. The vulnerability relies on incorrect assumptions made by the application when handling the sequence or state of keys provided during SSH authentication. Properly implemented systems that use the Permissions field or avoid relying on external state remain unaffected. Additionally, the vulnerability does not allow direct exploitation to gain control over a system without the presence of insecure logic in the application\u0027s handling of authentication attempts.\n\n\nRed Hat Enterprise Linux(RHEL) 8 \u0026 9 and Red Hat Openshift marked as not affected as it was determined that the problem function `ServerConfig.PublicKeyCallback`, as noted in the CVE-2024-45337 issue, is not called by Podman, Buildah, containers-common, or the gvisor-tap-vsock projects.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45337"
},
{
"category": "external",
"summary": "RHBZ#2331720",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331720"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45337",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45337"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45337",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45337"
},
{
"category": "external",
"summary": "https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909",
"url": "https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909"
},
{
"category": "external",
"summary": "https://go.dev/cl/635315",
"url": "https://go.dev/cl/635315"
},
{
"category": "external",
"summary": "https://go.dev/issue/70779",
"url": "https://go.dev/issue/70779"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ",
"url": "https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2024-3321",
"url": "https://pkg.go.dev/vuln/GO-2024-3321"
}
],
"release_date": "2024-12-11T18:55:58.506000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-03T22:07:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6568"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto"
},
{
"cve": "CVE-2024-45338",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2024-12-18T21:00:59.938173+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2333122"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. This flaw allows an attacker to craft input to the parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This issue can cause a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity because an attacker can craft malicious input that causes the parsing functions to process data non-linearly, resulting in significant delays which leads to a denial of service by exhausting system resources.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45338"
},
{
"category": "external",
"summary": "RHBZ#2333122",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2333122"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45338",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45338"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45338",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45338"
},
{
"category": "external",
"summary": "https://go.dev/cl/637536",
"url": "https://go.dev/cl/637536"
},
{
"category": "external",
"summary": "https://go.dev/issue/70906",
"url": "https://go.dev/issue/70906"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ",
"url": "https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2024-3333",
"url": "https://pkg.go.dev/vuln/GO-2024-3333"
}
],
"release_date": "2024-12-18T20:38:22.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-03T22:07:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6568"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html"
},
{
"cve": "CVE-2025-61726",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:42.791305+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "RHBZ#2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://go.dev/cl/736712",
"url": "https://go.dev/cl/736712"
},
{
"category": "external",
"summary": "https://go.dev/issue/77101",
"url": "https://go.dev/issue/77101"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4341",
"url": "https://pkg.go.dev/vuln/GO-2026-4341"
}
],
"release_date": "2026-01-28T19:30:31.215000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-03T22:07:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6568"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"
},
{
"cve": "CVE-2025-61728",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:39.965024+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434431"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the archive/zip package in the Go standard library. A super-linear file name indexing algorithm is used in the first time a file in an archive is opened. A crafted zip archive containing a specific arrangement of file names can cause an excessive CPU and memory consumption. A Go application processing a malicious archive can become unresponsive or crash, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to be able to process a malicious zip archive with an application using the archive/zip package. Additionally, this vulnerability can cause a Go application to consume an excessive amount of CPU and memory, eventually resulting in a denial of service with no other security impact. Due to these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61728"
},
{
"category": "external",
"summary": "RHBZ#2434431",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434431"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61728",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61728"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61728",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61728"
},
{
"category": "external",
"summary": "https://go.dev/cl/736713",
"url": "https://go.dev/cl/736713"
},
{
"category": "external",
"summary": "https://go.dev/issue/77102",
"url": "https://go.dev/issue/77102"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4342",
"url": "https://pkg.go.dev/vuln/GO-2026-4342"
}
],
"release_date": "2026-01-28T19:30:31.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-03T22:07:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6568"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, implement a timeout in your archive/zip processing logic to abort the operation if it exceeds a few seconds, preventing the application from consuming an excessive amount of resources.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-03T22:07:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6568"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-03T22:07:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6568"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2025-68158",
"cwe": {
"id": "CWE-352",
"name": "Cross-Site Request Forgery (CSRF)"
},
"discovery_date": "2026-01-08T19:01:41.615962+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2428102"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Authlib, a Python library used for building OAuth and OpenID Connect servers. The cache-backed state and request-token storage within Authlib is not securely linked to the user\u0027s initiating session. This vulnerability allows a remote attacker to exploit a Cross-Site Request Forgery (CSRF) by obtaining a valid state, which can lead to unauthorized actions being performed on behalf of the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Authlib: Authlib: Cross-Site Request Forgery due to improper session management in state storage",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Moderate for Red Hat products utilizing Authlib, such as Red Hat Ansible Automation Platform, Hosted OpenShift Clusters, Red Hat Quay, and Red Hat Satellite. The flaw arises from improper session management in Authlib\u0027s cache-backed state storage, allowing a remote attacker to perform Cross-Site Request Forgery (CSRF) by obtaining a valid state.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68158"
},
{
"category": "external",
"summary": "RHBZ#2428102",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2428102"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68158",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68158"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68158",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68158"
},
{
"category": "external",
"summary": "https://github.com/authlib/authlib/commit/2808378611dd6fb2532b189a9087877d8f0c0489",
"url": "https://github.com/authlib/authlib/commit/2808378611dd6fb2532b189a9087877d8f0c0489"
},
{
"category": "external",
"summary": "https://github.com/authlib/authlib/commit/7974f45e4d7492ab5f527577677f2770ce423228",
"url": "https://github.com/authlib/authlib/commit/7974f45e4d7492ab5f527577677f2770ce423228"
},
{
"category": "external",
"summary": "https://github.com/authlib/authlib/security/advisories/GHSA-fg6f-75jq-6523",
"url": "https://github.com/authlib/authlib/security/advisories/GHSA-fg6f-75jq-6523"
}
],
"release_date": "2026-01-08T17:58:17.724000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-03T22:07:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6568"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Authlib: Authlib: Cross-Site Request Forgery due to improper session management in state storage"
},
{
"cve": "CVE-2025-69873",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-02-11T19:01:32.953264+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2439070"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ajv. When the $data option is enabled, the value of the pattern keyword is passed directly to the JavaScript RegExp() constructor without sufficient validation. An attacker able to supply a malicious regular expression pattern can trigger a ReDoS (Regular Expression Denial of Service), causing the application to become unresponsive and resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ajv: ReDoS via $data reference",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, the $data option must be enabled and the attacker needs to be able to send a payload with a specially crafted regular expression to the application processing the input. A 31-character payload causes approximately 44 seconds of execution, with each additional character doubling the execution time. Therefore, even a small payload can cause an application to become unresponsive and eventually result in a denial of service. Due to this reason, this flaw has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69873"
},
{
"category": "external",
"summary": "RHBZ#2439070",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2439070"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69873",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69873"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69873",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69873"
},
{
"category": "external",
"summary": "https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69873-ajv-ReDoS.md",
"url": "https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69873-ajv-ReDoS.md"
}
],
"release_date": "2026-02-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-03T22:07:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6568"
},
{
"category": "workaround",
"details": "To mitigate this issue, disable the $data feature if your application does not require it. If $data must be used, implement strict validation of the input fields that are referenced by the pattern keyword to ensure they contain only expected and safe characters.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ajv: ReDoS via $data reference"
},
{
"cve": "CVE-2026-4598",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"discovery_date": "2026-03-23T06:01:47.891452+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450210"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jsrsasign. A remote attacker could exploit this vulnerability by providing specially crafted zero or negative inputs to the bnModInverse function within the BigInteger.modInverse implementation. This could lead to an infinite loop, causing a permanent denial of service (DoS) by hanging the process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jsrsasign: jsrsasign: Denial of Service via infinite loop in bnModInverse function with crafted inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "IMPORTANT: A denial of service flaw was found in jsrsasign. This vulnerability allows a remote attacker to cause a permanent denial of service by providing specially crafted zero or negative inputs to the bnModInverse function, leading to an infinite loop. This affects Red Hat Migration Toolkit for Virtualization and Red Hat Quay, which utilize the vulnerable jsrsasign component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4598"
},
{
"category": "external",
"summary": "RHBZ#2450210",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450210"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4598",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4598"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4598",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4598"
},
{
"category": "external",
"summary": "https://gist.github.com/Kr0emer/a1bf5cd4547cc630d2dcc5e761de8264",
"url": "https://gist.github.com/Kr0emer/a1bf5cd4547cc630d2dcc5e761de8264"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/commit/ca5b027240287a1e71fe63019fc4400332594323",
"url": "https://github.com/kjur/jsrsasign/commit/ca5b027240287a1e71fe63019fc4400332594323"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/pull/648",
"url": "https://github.com/kjur/jsrsasign/pull/648"
},
{
"category": "external",
"summary": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370938",
"url": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370938"
}
],
"release_date": "2026-03-23T05:00:11.571000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-03T22:07:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6568"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jsrsasign: jsrsasign: Denial of Service via infinite loop in bnModInverse function with crafted inputs"
},
{
"cve": "CVE-2026-4599",
"cwe": {
"id": "CWE-338",
"name": "Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)"
},
"discovery_date": "2026-03-23T06:01:34.008562+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jsrsasign. An attacker can exploit an incomplete comparison vulnerability in the getRandomBigIntegerZeroToMax and getRandomBigIntegerMinToMax functions. By manipulating incorrect comparison checks, an attacker can bias the Digital Signature Algorithm (DSA) nonces during signature generation. This allows the attacker to recover the private key, leading to a critical security compromise.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jsrsasign: jsrsasign: Private key recovery via incomplete comparison checks biasing DSA nonces",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4599"
},
{
"category": "external",
"summary": "RHBZ#2450207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4599",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4599"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4599",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4599"
},
{
"category": "external",
"summary": "https://gist.github.com/Kr0emer/081681818b51605c91945126d74b4f20",
"url": "https://gist.github.com/Kr0emer/081681818b51605c91945126d74b4f20"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/commit/ee4b013478366cb16cea9a4bdfb218b6077f83b1",
"url": "https://github.com/kjur/jsrsasign/commit/ee4b013478366cb16cea9a4bdfb218b6077f83b1"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/pull/647",
"url": "https://github.com/kjur/jsrsasign/pull/647"
},
{
"category": "external",
"summary": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370939",
"url": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370939"
}
],
"release_date": "2026-03-23T05:00:12.522000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-03T22:07:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6568"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jsrsasign: jsrsasign: Private key recovery via incomplete comparison checks biasing DSA nonces"
},
{
"cve": "CVE-2026-4600",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-03-23T06:01:39.334925+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450208"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jsrsasign. An attacker can exploit improper verification of cryptographic signatures by supplying malicious domain parameters during the Digital Signature Algorithm (DSA) validation process. This allows the attacker to forge DSA signatures or X.509 certificates, which would then be accepted as legitimate, potentially leading to unauthorized access or data manipulation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jsrsasign: jsrsasign: Cryptographic signature forgery via malicious DSA domain parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "IMPORTANT. The flaw in jsrsasign allows an attacker to forge Digital Signature Algorithm (DSA) signatures or X.509 certificates by providing malicious domain parameters during validation. This could lead to unauthorized access or data manipulation in affected Red Hat products such as Migration Toolkit for Virtualization and Red Hat Quay, where jsrsasign is utilized for cryptographic signature verification.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4600"
},
{
"category": "external",
"summary": "RHBZ#2450208",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450208"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4600",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4600"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4600",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4600"
},
{
"category": "external",
"summary": "https://gist.github.com/Kr0emer/bf15ddc097176e951659a24a8e9002a7",
"url": "https://gist.github.com/Kr0emer/bf15ddc097176e951659a24a8e9002a7"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/commit/37b4c06b145c7bfd6bc2a6df5d0a12c56b15ef60",
"url": "https://github.com/kjur/jsrsasign/commit/37b4c06b145c7bfd6bc2a6df5d0a12c56b15ef60"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/pull/646",
"url": "https://github.com/kjur/jsrsasign/pull/646"
},
{
"category": "external",
"summary": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370940",
"url": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370940"
}
],
"release_date": "2026-03-23T05:00:08.475000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-03T22:07:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6568"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jsrsasign: jsrsasign: Cryptographic signature forgery via malicious DSA domain parameters"
},
{
"cve": "CVE-2026-4601",
"cwe": {
"id": "CWE-325",
"name": "Missing Cryptographic Step"
},
"discovery_date": "2026-03-23T06:01:44.014846+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450209"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jsrsasign. An attacker can exploit a missing cryptographic step in the Digital Signature Algorithm (DSA) signing process, specifically within the KJUR.crypto.DSA.signWithMessageHash function. By manipulating the signature generation to force specific values, the library emits an invalid signature without retrying. This vulnerability allows an attacker to recover the private key used for signing.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jsrsasign: jsrsasign: Private Key Recovery via Missing Cryptographic Step in DSA Signing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "IMPORTANT: A flaw in the jsrsasign library allows for private key recovery due to a missing cryptographic step in the Digital Signature Algorithm (DSA) signing process. An attacker can manipulate signature generation within the KJUR.crypto.DSA.signWithMessageHash function to force specific values, enabling the recovery of the private key. This impacts Red Hat products utilizing jsrsasign, such as Migration Toolkit for Virtualization and Red Hat Quay.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4601"
},
{
"category": "external",
"summary": "RHBZ#2450209",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450209"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4601",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4601"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4601",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4601"
},
{
"category": "external",
"summary": "https://gist.github.com/Kr0emer/93789fe6efe5519db9692d4ad1dad586",
"url": "https://gist.github.com/Kr0emer/93789fe6efe5519db9692d4ad1dad586"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/commit/0710e392ec35de697ce11e4219c988ba2b5fe0eb",
"url": "https://github.com/kjur/jsrsasign/commit/0710e392ec35de697ce11e4219c988ba2b5fe0eb"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/pull/645",
"url": "https://github.com/kjur/jsrsasign/pull/645"
},
{
"category": "external",
"summary": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370941",
"url": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370941"
}
],
"release_date": "2026-03-23T05:00:13.312000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-03T22:07:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6568"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jsrsasign: jsrsasign: Private Key Recovery via Missing Cryptographic Step in DSA Signing"
},
{
"cve": "CVE-2026-4602",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-03-23T06:01:28.729668+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450206"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jsrsasign. A remote attacker can exploit an incorrect conversion between numeric types by providing a negative exponent to the `modPow` function. This vulnerability can force the computation of incorrect modular inverses, which ultimately allows an attacker to bypass signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jsrsasign: jsrsasign: Signature verification bypass via negative exponent handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an IMPORTANT flaw. The `jsrsasign` library, as used in Red Hat products such as Migration Toolkit for Virtualization and Red Hat Quay, is vulnerable to a signature verification bypass. A remote attacker could provide a specially crafted negative exponent to the `modPow` function, leading to incorrect modular inverse computations and allowing them to bypass signature verification.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4602"
},
{
"category": "external",
"summary": "RHBZ#2450206",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450206"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4602",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4602"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4602",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4602"
},
{
"category": "external",
"summary": "https://gist.github.com/Kr0emer/7ecd2be7d17419e4677315ef3758faf5",
"url": "https://gist.github.com/Kr0emer/7ecd2be7d17419e4677315ef3758faf5"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/commit/5ea1c32bb2aa894b4bd29849839afe4f98728195",
"url": "https://github.com/kjur/jsrsasign/commit/5ea1c32bb2aa894b4bd29849839afe4f98728195"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/pull/650",
"url": "https://github.com/kjur/jsrsasign/pull/650"
},
{
"category": "external",
"summary": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15371175",
"url": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15371175"
}
],
"release_date": "2026-03-23T05:00:10.567000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-03T22:07:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6568"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jsrsasign: jsrsasign: Signature verification bypass via negative exponent handling"
},
{
"cve": "CVE-2026-25639",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"discovery_date": "2026-02-09T21:00:49.280114+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2438237"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw has been discovered in the Axios npm package. the mergeConfig function in axios crashes with a TypeError when processing configuration objects containing __proto__ as an own property. An attacker can trigger this by providing a malicious configuration object created via JSON.parse(), causing complete denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios affected by Denial of Service via __proto__ Key in mergeConfig",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25639"
},
{
"category": "external",
"summary": "RHBZ#2438237",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2438237"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25639",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25639"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25639",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25639"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/28c721588c7a77e7503d0a434e016f852c597b57",
"url": "https://github.com/axios/axios/commit/28c721588c7a77e7503d0a434e016f852c597b57"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.13.5",
"url": "https://github.com/axios/axios/releases/tag/v1.13.5"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-43fc-jf86-j433",
"url": "https://github.com/axios/axios/security/advisories/GHSA-43fc-jf86-j433"
}
],
"release_date": "2026-02-09T20:11:22.374000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-03T22:07:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6568"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios affected by Denial of Service via __proto__ Key in mergeConfig"
},
{
"cve": "CVE-2026-25990",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-02-11T21:05:39.535631+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2439170"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found the Pillow Python imaging library. Providing a specially crafted PSD image may lead to an out-of-bounds write. This could potentially allow for arbitrary code execution or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pillow: Pillow: Out-of-bounds Write via Specially Crafted PSD Image",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25990"
},
{
"category": "external",
"summary": "RHBZ#2439170",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2439170"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25990"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25990",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25990"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/commit/9000313cc5d4a31bdcdd6d7f0781101abab553aa",
"url": "https://github.com/python-pillow/Pillow/commit/9000313cc5d4a31bdcdd6d7f0781101abab553aa"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-cfh3-3jmp-rvhc",
"url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-cfh3-3jmp-rvhc"
}
],
"release_date": "2026-02-11T20:53:52.524000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-03T22:07:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6568"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pillow: Pillow: Out-of-bounds Write via Specially Crafted PSD Image"
},
{
"cve": "CVE-2026-26007",
"cwe": {
"id": "CWE-354",
"name": "Improper Validation of Integrity Check Value"
},
"discovery_date": "2026-02-10T22:01:01.036116+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2438762"
}
],
"notes": [
{
"category": "description",
"text": "A validation flaw has been discovered in the python cryptography package. This missing validation allows an attacker to provide a public key point P from a small-order subgroup. This can lead to security issues in various situations, such as the most commonly used signature verification (ECDSA) and shared key negotiation (ECDH). When the victim computes the shared secret as S = [victim_private_key]P via ECDH, this leaks information about victim_private_key mod (small_subgroup_order). For curves with cofactor \u003e 1, this reveals the least significant bits of the private key. When these weak public keys are used in ECDSA , it\u0027s easy to forge signatures on the small subgroup. Only SECT curves are impacted by this.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cryptography: cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw, while difficult to exploit, would lead to a loss of integrity in the encrypted communication channel. Given that the cryptography package is a library, it is likely to be used in situations that do not require user interaction.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-26007"
},
{
"category": "external",
"summary": "RHBZ#2438762",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2438762"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-26007",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-26007"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-26007",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26007"
},
{
"category": "external",
"summary": "https://github.com/pyca/cryptography/commit/0eebb9dbb6343d9bc1d91e5a2482ed4e054a6d8c",
"url": "https://github.com/pyca/cryptography/commit/0eebb9dbb6343d9bc1d91e5a2482ed4e054a6d8c"
},
{
"category": "external",
"summary": "https://github.com/pyca/cryptography/security/advisories/GHSA-r6ph-v2qm-q3c2",
"url": "https://github.com/pyca/cryptography/security/advisories/GHSA-r6ph-v2qm-q3c2"
}
],
"release_date": "2026-02-10T21:42:56.471000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-03T22:07:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6568"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "cryptography: cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves"
},
{
"cve": "CVE-2026-26996",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-02-20T04:01:11.896063+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2441268"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in minimatch. A remote attacker could exploit this Regular Expression Denial of Service (ReDoS) vulnerability by providing a specially crafted glob pattern. This pattern, containing numerous consecutive wildcard characters, causes excessive processing and exponential backtracking in the regular expression engine. Successful exploitation leads to a Denial of Service (DoS), making the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "minimatch: minimatch: Denial of Service via specially crafted glob patterns",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this flaw requires that a user or service processes untrusted input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-26996"
},
{
"category": "external",
"summary": "RHBZ#2441268",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2441268"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-26996",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-26996"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-26996",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26996"
},
{
"category": "external",
"summary": "https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5",
"url": "https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5"
},
{
"category": "external",
"summary": "https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26",
"url": "https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26"
}
],
"release_date": "2026-02-20T03:05:21.105000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-03T22:07:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6568"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "minimatch: minimatch: Denial of Service via specially crafted glob patterns"
},
{
"cve": "CVE-2026-27628",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-02-25T04:02:09.864561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2442543"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pypdf. Processing a specially crafted PDF document, specifically with circular /Prev references in the cross-reference (xref) chain, can cause an infinite loop and a high consumption of CPU, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pypdf: possible infinite loop when loading circular /Prev entries in cross-reference streams",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker must be able to supply a crafted PDF file to be processed by an application using the pypdf library. This issue can cause the application to enter an infinite loop and consume a high amount of CPU resources, eventually resulting in a denial of service with no other security impact. Due to these reasons, this vulnerability has been rated with a moderate impact.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27628"
},
{
"category": "external",
"summary": "RHBZ#2442543",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2442543"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27628",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27628"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27628",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27628"
},
{
"category": "external",
"summary": "https://github.com/py-pdf/pypdf/commit/0fbd95938724ad2d72688d4112207c0590f0483f",
"url": "https://github.com/py-pdf/pypdf/commit/0fbd95938724ad2d72688d4112207c0590f0483f"
},
{
"category": "external",
"summary": "https://github.com/py-pdf/pypdf/issues/3654",
"url": "https://github.com/py-pdf/pypdf/issues/3654"
},
{
"category": "external",
"summary": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-2rw7-x74f-jg35",
"url": "https://github.com/py-pdf/pypdf/security/advisories/GHSA-2rw7-x74f-jg35"
}
],
"release_date": "2026-02-25T02:45:37.543000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-03T22:07:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6568"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "pypdf: possible infinite loop when loading circular /Prev entries in cross-reference streams"
},
{
"cve": "CVE-2026-27904",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-02-26T02:01:23.004531+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2442922"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in minimatch. A remote attacker could exploit this vulnerability by providing a specially crafted glob expression with nested unbounded quantifiers. This could lead to catastrophic backtracking in the V8 JavaScript engine, causing the application to become unresponsive and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this flaw requires that a user or service processes untrusted input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27904"
},
{
"category": "external",
"summary": "RHBZ#2442922",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2442922"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27904",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27904"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27904",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27904"
},
{
"category": "external",
"summary": "https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74",
"url": "https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74"
}
],
"release_date": "2026-02-26T01:07:42.693000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-03T22:07:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6568"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions"
},
{
"cve": "CVE-2026-28498",
"cwe": {
"id": "CWE-325",
"name": "Missing Cryptographic Step"
},
"discovery_date": "2026-03-16T19:02:00.128339+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448182"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Authlib, a Python library used for building OAuth and OpenID Connect (OIDC) servers. This vulnerability allows a remote attacker to bypass critical integrity checks in OIDC ID Tokens. Specifically, the library\u0027s internal hash verification logic fails open when encountering an unsupported cryptographic algorithm, accepting a forged ID Token as valid. This can lead to an authentication bypass, granting unauthorized access to systems relying on Authlib for OIDC authentication.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "authlib: Authlib: Authentication bypass via forged OpenID Connect ID Tokens",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This IMPORTANT vulnerability in Authlib allows attackers to bypass OIDC ID Token integrity verification. The at_hash and c_hash validation fails open for unknown algorithms, accepting forged tokens as valid. Exploitation requires no authentication or user interaction. Impact is high to confidentiality and integrity. Red Hat products using Authlib for OIDC validation are affected. Fixed in version 1.6.9.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-28498"
},
{
"category": "external",
"summary": "RHBZ#2448182",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448182"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-28498",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28498"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-28498",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28498"
},
{
"category": "external",
"summary": "https://github.com/authlib/authlib/commit/b9bb2b25bf8b7e01512d847a95c1749646eaa72b",
"url": "https://github.com/authlib/authlib/commit/b9bb2b25bf8b7e01512d847a95c1749646eaa72b"
},
{
"category": "external",
"summary": "https://github.com/authlib/authlib/releases/tag/v1.6.9",
"url": "https://github.com/authlib/authlib/releases/tag/v1.6.9"
},
{
"category": "external",
"summary": "https://github.com/authlib/authlib/security/advisories/GHSA-m344-f55w-2m6j",
"url": "https://github.com/authlib/authlib/security/advisories/GHSA-m344-f55w-2m6j"
}
],
"release_date": "2026-03-16T18:03:28.821000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-03T22:07:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6568"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "authlib: Authlib: Authentication bypass via forged OpenID Connect ID Tokens"
},
{
"cve": "CVE-2026-28802",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-03-06T07:01:49.366979+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445120"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Authlib, a Python library for building OAuth and OpenID Connect servers. A remote attacker can exploit this vulnerability by crafting a malicious JSON Web Token (JWT) with a \"none\" algorithm and an empty signature. This bypasses the expected signature verification, potentially allowing the attacker to forge tokens and gain unauthorized access or perform unauthorized actions within applications using Authlib.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "authlib: Authlib: Signature verification bypass via malicious JWT allows unauthorized access",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-28802"
},
{
"category": "external",
"summary": "RHBZ#2445120",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445120"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-28802",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28802"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-28802",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28802"
},
{
"category": "external",
"summary": "https://github.com/authlib/authlib/commit/a61c2acb807496e67f32051b5f1b1d5ccf8f0a75",
"url": "https://github.com/authlib/authlib/commit/a61c2acb807496e67f32051b5f1b1d5ccf8f0a75"
},
{
"category": "external",
"summary": "https://github.com/authlib/authlib/commit/b87c32ed07b8ae7f805873e1c9cafd1016761df7",
"url": "https://github.com/authlib/authlib/commit/b87c32ed07b8ae7f805873e1c9cafd1016761df7"
},
{
"category": "external",
"summary": "https://github.com/authlib/authlib/security/advisories/GHSA-7wc2-qxgw-g8gg",
"url": "https://github.com/authlib/authlib/security/advisories/GHSA-7wc2-qxgw-g8gg"
}
],
"release_date": "2026-03-06T06:44:26.402000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-03T22:07:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6568"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "authlib: Authlib: Signature verification bypass via malicious JWT allows unauthorized access"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-03T22:07:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6568"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-29074",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-03-06T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445132"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in SVGO, an SVG (Scalable Vector Graphics) Optimizer. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML file. The application\u0027s failure to properly guard against XML entity expansion or recursion can lead to the Node.js process consuming excessive memory and crashing.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "svgo: SVGO: Denial of Service via XML entity expansion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29074"
},
{
"category": "external",
"summary": "RHBZ#2445132",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445132"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29074",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29074"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29074",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29074"
},
{
"category": "external",
"summary": "https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673",
"url": "https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673"
}
],
"release_date": "2026-03-06T07:23:05.716000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-03T22:07:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6568"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "svgo: SVGO: Denial of Service via XML entity expansion"
},
{
"cve": "CVE-2026-30922",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-03-18T04:02:45.401296+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448553"
}
],
"notes": [
{
"category": "description",
"text": "An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-30922"
},
{
"category": "external",
"summary": "RHBZ#2448553",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448553"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-30922",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-30922"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",
"url": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r"
}
],
"release_date": "2026-03-18T02:29:45.857000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-03T22:07:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6568"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion"
},
{
"cve": "CVE-2026-32597",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-03-12T22:01:29.967713+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2447194"
}
],
"notes": [
{
"category": "description",
"text": "A missing verification step has been discovered in PyJWT. PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 \u00a74.1.11. When a JWS token contains a crit array listing extensions that PyJWT does not understand, the library accepts the token instead of rejecting it. This violates the MUST requirement in the RFC.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 \u00a74.1.11 MUST violation)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32597"
},
{
"category": "external",
"summary": "RHBZ#2447194",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447194"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32597"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f"
}
],
"release_date": "2026-03-12T21:41:50.427000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-03T22:07:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6568"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:0a1c4f139b35d13aa4b3f6508919e25d3bbfdf588337704c1fc8cc7085bc2eb2_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:35047410a723f6e5b71137b7c6de497eed464dc1528419645cb308f2fd0696d6_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:76c0db9a4d4fcb45502d9d852f23a96aee91990217e19b519f7608eeb377eb22_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:ebdb8e8b383adc86e78fbed0937c27bead67d0b6cb897a93c1558fd265696a1b_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:88854cbe000c3d84ee1000f1d350332eb861a031ece1e1ce0a4f85bcd1eb584e_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:a1d9c6f2f614dcea14f3b4564e69fe9ca894c9498fd08c5fdaa3616768ccedc3_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d6ab62eec5e5489daa85fdda283e86c96101f7d576432d5a4b2865e4fdb0dbf1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:7b129e1319cc2f0edb134149b2cfecc021ca552cfede24d74d4631c3019e233e_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:2970429dcb7f99abf0d0cef4fa59346c90f129ae46d6e746d128b13e55616e06_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5c02fe25ab73d531f543a673997170b5079c59c93e6ea240e795bfe6520782e3_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d81c106c68fab8c44dcd4c14698be0b8c76862885483ae20c5aa83c8334c805_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:3681b3bb7257b54ea71d65370158e52d7165cc1038c129ea0266af21a773a022_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:cde4dc0f20b553550d6009ebc105e5cc80fbdd21d200f3d63f6c435f4addd804_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:ee7bf66cbb9116521d74e87d5a1b260bcce7634100aab7602149ad2c5bed4c72_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:dec2520d12b13cd73ebceb03a82daddfff4b06e57e993268ea52cd21c0136147_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:26a62adcd46e5f84dff66336ccf9392a5bb8369b042dd01c3528ade17c6efa55_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:8429e68dd8a1f4dc768304d17cd61beb772c0bcf5a4137d626b0a7333204d116_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:e5da14b11a892cc6cad89703d6415b95a47065fa2b1eb308c395579e9cce392a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:8acebb6bd51def60517b03f92103cecfadfc8e7fce42e4a002cb9c9271915b6b_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:be166b843cc21b3942850443c0f802406f397f71959654a45e17a24fdcb0606a_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:c72dd9dd58db8ebcdc9b4daa433840411636e3dea82b21ca191fd0d272e636ec_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 \u00a74.1.11 MUST violation)"
}
]
}
RHSA-2026:6720
Vulnerability from csaf_redhat - Published: 2026-04-06 22:57 - Updated: 2026-08-10 20:38Summary
Red Hat Security Advisory: Red Hat Quay 3.12.16
Severity
Important
Notes
Topic: Red Hat Quay 3.12.16 is now available with bug fixes.
Details: Quay 3.12.16
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in jsrsasign. A remote attacker could exploit this vulnerability by providing specially crafted zero or negative inputs to the bnModInverse function within the BigInteger.modInverse implementation. This could lead to an infinite loop, causing a permanent denial of service (DoS) by hanging the process.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in jsrsasign. An attacker can exploit an incomplete comparison vulnerability in the getRandomBigIntegerZeroToMax and getRandomBigIntegerMinToMax functions. By manipulating incorrect comparison checks, an attacker can bias the Digital Signature Algorithm (DSA) nonces during signature generation. This allows the attacker to recover the private key, leading to a critical security compromise.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in jsrsasign. An attacker can exploit improper verification of cryptographic signatures by supplying malicious domain parameters during the Digital Signature Algorithm (DSA) validation process. This allows the attacker to forge DSA signatures or X.509 certificates, which would then be accepted as legitimate, potentially leading to unauthorized access or data manipulation.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in jsrsasign. An attacker can exploit a missing cryptographic step in the Digital Signature Algorithm (DSA) signing process, specifically within the KJUR.crypto.DSA.signWithMessageHash function. By manipulating the signature generation to force specific values, the library emits an invalid signature without retrying. This vulnerability allows an attacker to recover the private key used for signing.
8.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in jsrsasign. A remote attacker can exploit an incorrect conversion between numeric types by providing a negative exponent to the `modPow` function. This vulnerability can force the computation of incorrect modular inverses, which ultimately allows an attacker to bypass signature verification.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64 | — |
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Authlib, a Python library used for building OAuth and OpenID Connect (OIDC) servers. This vulnerability allows a remote attacker to bypass critical integrity checks in OIDC ID Tokens. Specifically, the library's internal hash verification logic fails open when encountering an unsupported cryptographic algorithm, accepting a forged ID Token as valid. This can lead to an authentication bypass, granting unauthorized access to systems relying on Authlib for OIDC authentication.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le | — |
Vendor Fix
fix
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64 | — |
Threats
Impact
Important
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le | — |
Vendor Fix
fix
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64 | — |
Threats
Impact
Important
An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64 | — |
Workaround
|
Threats
Impact
Important
A missing verification step has been discovered in PyJWT. PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. When a JWS token contains a crit array listing extensions that PyJWT does not understand, the library accepts the token instead of rejecting it. This violates the MUST requirement in the RFC.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64 | — |
Workaround
|
Threats
Impact
Important
References
87 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Quay 3.12.16 is now available with bug fixes.",
"title": "Topic"
},
{
"category": "general",
"text": "Quay 3.12.16",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:6720",
"url": "https://access.redhat.com/errata/RHSA-2026:6720"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-28498",
"url": "https://access.redhat.com/security/cve/CVE-2026-28498"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-30922",
"url": "https://access.redhat.com/security/cve/CVE-2026-30922"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32597",
"url": "https://access.redhat.com/security/cve/CVE-2026-32597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4598",
"url": "https://access.redhat.com/security/cve/CVE-2026-4598"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4599",
"url": "https://access.redhat.com/security/cve/CVE-2026-4599"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4600",
"url": "https://access.redhat.com/security/cve/CVE-2026-4600"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4601",
"url": "https://access.redhat.com/security/cve/CVE-2026-4601"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4602",
"url": "https://access.redhat.com/security/cve/CVE-2026-4602"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_6720.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Quay 3.12.16",
"tracking": {
"current_release_date": "2026-08-10T20:38:30+00:00",
"generator": {
"date": "2026-08-10T20:38:30+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHSA-2026:6720",
"initial_release_date": "2026-04-06T22:57:46+00:00",
"revision_history": [
{
"date": "2026-04-06T22:57:46+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-10T20:38:30+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Quay 3.12",
"product": {
"name": "Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:quay:3.12::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Quay"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3A4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774886169"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Abddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885564"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3Abdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774886107"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885572"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3Ab812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1775236144"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885641"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3Aefa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885604"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256%3A3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1775257350"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3Ab227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885546"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3A356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1775253092"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Ae797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad?arch=arm64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885564"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4?arch=arm64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885572"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b?arch=arm64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885641"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85?arch=arm64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885604"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3Ab75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7?arch=arm64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885546"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3A82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f?arch=arm64\u0026repository_url=registry.redhat.io/quay\u0026tag=1775253092"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885564"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885572"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3Aba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885641"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885604"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3A5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885546"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3Acd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1775253092"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885564"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885572"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885641"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885604"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3A11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885546"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3Ac8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1775253092"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-4598",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"discovery_date": "2026-03-23T06:01:47.891452+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450210"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jsrsasign. A remote attacker could exploit this vulnerability by providing specially crafted zero or negative inputs to the bnModInverse function within the BigInteger.modInverse implementation. This could lead to an infinite loop, causing a permanent denial of service (DoS) by hanging the process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jsrsasign: jsrsasign: Denial of Service via infinite loop in bnModInverse function with crafted inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "IMPORTANT: A denial of service flaw was found in jsrsasign. This vulnerability allows a remote attacker to cause a permanent denial of service by providing specially crafted zero or negative inputs to the bnModInverse function, leading to an infinite loop. This affects Red Hat Migration Toolkit for Virtualization and Red Hat Quay, which utilize the vulnerable jsrsasign component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4598"
},
{
"category": "external",
"summary": "RHBZ#2450210",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450210"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4598",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4598"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4598",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4598"
},
{
"category": "external",
"summary": "https://gist.github.com/Kr0emer/a1bf5cd4547cc630d2dcc5e761de8264",
"url": "https://gist.github.com/Kr0emer/a1bf5cd4547cc630d2dcc5e761de8264"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/commit/ca5b027240287a1e71fe63019fc4400332594323",
"url": "https://github.com/kjur/jsrsasign/commit/ca5b027240287a1e71fe63019fc4400332594323"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/pull/648",
"url": "https://github.com/kjur/jsrsasign/pull/648"
},
{
"category": "external",
"summary": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370938",
"url": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370938"
}
],
"release_date": "2026-03-23T05:00:11.571000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-06T22:57:46+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6720"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jsrsasign: jsrsasign: Denial of Service via infinite loop in bnModInverse function with crafted inputs"
},
{
"cve": "CVE-2026-4599",
"cwe": {
"id": "CWE-338",
"name": "Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)"
},
"discovery_date": "2026-03-23T06:01:34.008562+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jsrsasign. An attacker can exploit an incomplete comparison vulnerability in the getRandomBigIntegerZeroToMax and getRandomBigIntegerMinToMax functions. By manipulating incorrect comparison checks, an attacker can bias the Digital Signature Algorithm (DSA) nonces during signature generation. This allows the attacker to recover the private key, leading to a critical security compromise.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jsrsasign: jsrsasign: Private key recovery via incomplete comparison checks biasing DSA nonces",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4599"
},
{
"category": "external",
"summary": "RHBZ#2450207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4599",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4599"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4599",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4599"
},
{
"category": "external",
"summary": "https://gist.github.com/Kr0emer/081681818b51605c91945126d74b4f20",
"url": "https://gist.github.com/Kr0emer/081681818b51605c91945126d74b4f20"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/commit/ee4b013478366cb16cea9a4bdfb218b6077f83b1",
"url": "https://github.com/kjur/jsrsasign/commit/ee4b013478366cb16cea9a4bdfb218b6077f83b1"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/pull/647",
"url": "https://github.com/kjur/jsrsasign/pull/647"
},
{
"category": "external",
"summary": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370939",
"url": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370939"
}
],
"release_date": "2026-03-23T05:00:12.522000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-06T22:57:46+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6720"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jsrsasign: jsrsasign: Private key recovery via incomplete comparison checks biasing DSA nonces"
},
{
"cve": "CVE-2026-4600",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-03-23T06:01:39.334925+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450208"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jsrsasign. An attacker can exploit improper verification of cryptographic signatures by supplying malicious domain parameters during the Digital Signature Algorithm (DSA) validation process. This allows the attacker to forge DSA signatures or X.509 certificates, which would then be accepted as legitimate, potentially leading to unauthorized access or data manipulation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jsrsasign: jsrsasign: Cryptographic signature forgery via malicious DSA domain parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "IMPORTANT. The flaw in jsrsasign allows an attacker to forge Digital Signature Algorithm (DSA) signatures or X.509 certificates by providing malicious domain parameters during validation. This could lead to unauthorized access or data manipulation in affected Red Hat products such as Migration Toolkit for Virtualization and Red Hat Quay, where jsrsasign is utilized for cryptographic signature verification.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4600"
},
{
"category": "external",
"summary": "RHBZ#2450208",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450208"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4600",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4600"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4600",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4600"
},
{
"category": "external",
"summary": "https://gist.github.com/Kr0emer/bf15ddc097176e951659a24a8e9002a7",
"url": "https://gist.github.com/Kr0emer/bf15ddc097176e951659a24a8e9002a7"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/commit/37b4c06b145c7bfd6bc2a6df5d0a12c56b15ef60",
"url": "https://github.com/kjur/jsrsasign/commit/37b4c06b145c7bfd6bc2a6df5d0a12c56b15ef60"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/pull/646",
"url": "https://github.com/kjur/jsrsasign/pull/646"
},
{
"category": "external",
"summary": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370940",
"url": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370940"
}
],
"release_date": "2026-03-23T05:00:08.475000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-06T22:57:46+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6720"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jsrsasign: jsrsasign: Cryptographic signature forgery via malicious DSA domain parameters"
},
{
"cve": "CVE-2026-4601",
"cwe": {
"id": "CWE-325",
"name": "Missing Cryptographic Step"
},
"discovery_date": "2026-03-23T06:01:44.014846+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450209"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jsrsasign. An attacker can exploit a missing cryptographic step in the Digital Signature Algorithm (DSA) signing process, specifically within the KJUR.crypto.DSA.signWithMessageHash function. By manipulating the signature generation to force specific values, the library emits an invalid signature without retrying. This vulnerability allows an attacker to recover the private key used for signing.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jsrsasign: jsrsasign: Private Key Recovery via Missing Cryptographic Step in DSA Signing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "IMPORTANT: A flaw in the jsrsasign library allows for private key recovery due to a missing cryptographic step in the Digital Signature Algorithm (DSA) signing process. An attacker can manipulate signature generation within the KJUR.crypto.DSA.signWithMessageHash function to force specific values, enabling the recovery of the private key. This impacts Red Hat products utilizing jsrsasign, such as Migration Toolkit for Virtualization and Red Hat Quay.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4601"
},
{
"category": "external",
"summary": "RHBZ#2450209",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450209"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4601",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4601"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4601",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4601"
},
{
"category": "external",
"summary": "https://gist.github.com/Kr0emer/93789fe6efe5519db9692d4ad1dad586",
"url": "https://gist.github.com/Kr0emer/93789fe6efe5519db9692d4ad1dad586"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/commit/0710e392ec35de697ce11e4219c988ba2b5fe0eb",
"url": "https://github.com/kjur/jsrsasign/commit/0710e392ec35de697ce11e4219c988ba2b5fe0eb"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/pull/645",
"url": "https://github.com/kjur/jsrsasign/pull/645"
},
{
"category": "external",
"summary": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370941",
"url": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370941"
}
],
"release_date": "2026-03-23T05:00:13.312000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-06T22:57:46+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6720"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jsrsasign: jsrsasign: Private Key Recovery via Missing Cryptographic Step in DSA Signing"
},
{
"cve": "CVE-2026-4602",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-03-23T06:01:28.729668+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450206"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jsrsasign. A remote attacker can exploit an incorrect conversion between numeric types by providing a negative exponent to the `modPow` function. This vulnerability can force the computation of incorrect modular inverses, which ultimately allows an attacker to bypass signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jsrsasign: jsrsasign: Signature verification bypass via negative exponent handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an IMPORTANT flaw. The `jsrsasign` library, as used in Red Hat products such as Migration Toolkit for Virtualization and Red Hat Quay, is vulnerable to a signature verification bypass. A remote attacker could provide a specially crafted negative exponent to the `modPow` function, leading to incorrect modular inverse computations and allowing them to bypass signature verification.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4602"
},
{
"category": "external",
"summary": "RHBZ#2450206",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450206"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4602",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4602"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4602",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4602"
},
{
"category": "external",
"summary": "https://gist.github.com/Kr0emer/7ecd2be7d17419e4677315ef3758faf5",
"url": "https://gist.github.com/Kr0emer/7ecd2be7d17419e4677315ef3758faf5"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/commit/5ea1c32bb2aa894b4bd29849839afe4f98728195",
"url": "https://github.com/kjur/jsrsasign/commit/5ea1c32bb2aa894b4bd29849839afe4f98728195"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/pull/650",
"url": "https://github.com/kjur/jsrsasign/pull/650"
},
{
"category": "external",
"summary": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15371175",
"url": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15371175"
}
],
"release_date": "2026-03-23T05:00:10.567000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-06T22:57:46+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6720"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jsrsasign: jsrsasign: Signature verification bypass via negative exponent handling"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-06T22:57:46+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6720"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-28498",
"cwe": {
"id": "CWE-325",
"name": "Missing Cryptographic Step"
},
"discovery_date": "2026-03-16T19:02:00.128339+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448182"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Authlib, a Python library used for building OAuth and OpenID Connect (OIDC) servers. This vulnerability allows a remote attacker to bypass critical integrity checks in OIDC ID Tokens. Specifically, the library\u0027s internal hash verification logic fails open when encountering an unsupported cryptographic algorithm, accepting a forged ID Token as valid. This can lead to an authentication bypass, granting unauthorized access to systems relying on Authlib for OIDC authentication.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "authlib: Authlib: Authentication bypass via forged OpenID Connect ID Tokens",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This IMPORTANT vulnerability in Authlib allows attackers to bypass OIDC ID Token integrity verification. The at_hash and c_hash validation fails open for unknown algorithms, accepting forged tokens as valid. Exploitation requires no authentication or user interaction. Impact is high to confidentiality and integrity. Red Hat products using Authlib for OIDC validation are affected. Fixed in version 1.6.9.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-28498"
},
{
"category": "external",
"summary": "RHBZ#2448182",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448182"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-28498",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28498"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-28498",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28498"
},
{
"category": "external",
"summary": "https://github.com/authlib/authlib/commit/b9bb2b25bf8b7e01512d847a95c1749646eaa72b",
"url": "https://github.com/authlib/authlib/commit/b9bb2b25bf8b7e01512d847a95c1749646eaa72b"
},
{
"category": "external",
"summary": "https://github.com/authlib/authlib/releases/tag/v1.6.9",
"url": "https://github.com/authlib/authlib/releases/tag/v1.6.9"
},
{
"category": "external",
"summary": "https://github.com/authlib/authlib/security/advisories/GHSA-m344-f55w-2m6j",
"url": "https://github.com/authlib/authlib/security/advisories/GHSA-m344-f55w-2m6j"
}
],
"release_date": "2026-03-16T18:03:28.821000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-06T22:57:46+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6720"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "authlib: Authlib: Authentication bypass via forged OpenID Connect ID Tokens"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-06T22:57:46+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6720"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-30922",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-03-18T04:02:45.401296+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448553"
}
],
"notes": [
{
"category": "description",
"text": "An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-30922"
},
{
"category": "external",
"summary": "RHBZ#2448553",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448553"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-30922",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-30922"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",
"url": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r"
}
],
"release_date": "2026-03-18T02:29:45.857000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-06T22:57:46+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6720"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion"
},
{
"cve": "CVE-2026-32597",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-03-12T22:01:29.967713+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2447194"
}
],
"notes": [
{
"category": "description",
"text": "A missing verification step has been discovered in PyJWT. PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 \u00a74.1.11. When a JWS token contains a crit array listing extensions that PyJWT does not understand, the library accepts the token instead of rejecting it. This violates the MUST requirement in the RFC.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 \u00a74.1.11 MUST violation)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32597"
},
{
"category": "external",
"summary": "RHBZ#2447194",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447194"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32597"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f"
}
],
"release_date": "2026-03-12T21:41:50.427000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-06T22:57:46+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6720"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:158e91355000c4527f878d43b11bab30caaeb8d85f707e69d94483c4d44ddd85_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:61da0ae799c1ef6e61cf3b2ba19ce998c2696328e5369704ef3e1c5402451d3f_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:766cc9d5bc7715992dc9ab459cf2700b2bf9e1aae72305e9716a3ff8e7534647_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:efa57d5681d08f42eaf9b00c451de912941f35396c210b9ac7e93273813bb8d9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bdd86a8031e8e85fa8b61aebeade592793142d7bb14c97f08e6c81ff3342fa41_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:31e6e23006705ce61baec5b5a24ce6fee11bb9a8de805971dc09826bbf0617a4_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:446da34d353f43a7fb7f9cf90709c949e2035c37b181d6c262f91f6986597562_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6fdf7d2f9b3d617ffc488ba07a2cdaa5c4f522a20f7330e3d1c621ac1136533c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:91722cffb04ee1755fe217726481480f156e90575948a48b31d7f06869d6de9e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b812db7818088897fc45d616725a2479f38cdf9ba35b1edb99bd08ad9d7c6263_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:0519329d2166634e0be19592c5962e0ab5b90485fa9f8c3a1e41aa5117730449_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:62636a5a9ab8da9f3ac0c173ba9f99d11cbe178c07650cf53ced9679044c0d7b_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9d22bc2b0604a95c19ff3146e84282d0e70526d0c7ffda670b90200f2d0c1079_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ba593b315c1a1df41a417f0c5f0108ad4b962f60e2cb86f1ea6ae8f24a71e0a6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4f4e3cc554f1b2f62d0d7adb2a1d45b92c23d221c637e66a8d8c515f518fe49a_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5e97447d1bf5b862a38a8b97a79654c1ebcc109ca497f27be6a459317fcad544_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:7da8a84159e9f026db0ac3401bdf0bf815352491328cac2364d26f70b906c0cf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:bddbe10ba4d0acef1d62dd3ac706880ba09d67fbb86846acec027ea019861f51_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e797bfc0a32e362e6a381112851ba179bad0153f871c52fb01c55859f628aaad_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:3a39fbee6d07db7234471c19af99164778bcdd5fcb0102157cdf70e173962d2c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:11b959fe38c2f4330cdda0bfa5375345b7671831ba7e2cfd7996df2d9d663c85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:5ad64bc5b95669eee0a622ab568d3cd34e47910a05dc4a83c440af8f54ccee3e_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b227e106a92cc5bed111dbeff78f351e54ec927eb472f2650a8f7637bcfbd6aa_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b75428cf56c763ab4f005b0930a37eaf0998ef51e9a63b1b33ed2d69b33426d7_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:356815af5f87ce3a8e0ee8213bb9b5537b658f29338b51f63672c7e5d7a5a50b_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:82a11b494b47a72a72edbbb595998ad0a00ade358acdffc58fb07217bdf9c67f_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c8bdf44dcdd96608b3dbb3c07bacbaa06d17e6e5333881559425edc53051f100_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:cd330fe833ad4ffa7fa3f2837c876e5ad7ab36f7770d3353f60673e0100b7c0c_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 \u00a74.1.11 MUST violation)"
}
]
}
RHSA-2026:6926
Vulnerability from csaf_redhat - Published: 2026-04-07 21:36 - Updated: 2026-08-10 06:53Summary
Red Hat Security Advisory: Red Hat Quay 3.9.20
Severity
Important
Notes
Topic: Red Hat Quay 3.9.20 is now available with bug fixes.
Details: Quay 3.9.20
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in jsrsasign. An attacker can exploit an incomplete comparison vulnerability in the getRandomBigIntegerZeroToMax and getRandomBigIntegerMinToMax functions. By manipulating incorrect comparison checks, an attacker can bias the Digital Signature Algorithm (DSA) nonces during signature generation. This allows the attacker to recover the private key, leading to a critical security compromise.
9.1 (Critical)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in jsrsasign. An attacker can exploit improper verification of cryptographic signatures by supplying malicious domain parameters during the Digital Signature Algorithm (DSA) validation process. This allows the attacker to forge DSA signatures or X.509 certificates, which would then be accepted as legitimate, potentially leading to unauthorized access or data manipulation.
8.2 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in jsrsasign. An attacker can exploit a missing cryptographic step in the Digital Signature Algorithm (DSA) signing process, specifically within the KJUR.crypto.DSA.signWithMessageHash function. By manipulating the signature generation to force specific values, the library emits an invalid signature without retrying. This vulnerability allows an attacker to recover the private key used for signing.
8.7 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in jsrsasign. A remote attacker can exploit an incorrect conversion between numeric types by providing a negative exponent to the `modPow` function. This vulnerability can force the computation of incorrect modular inverses, which ultimately allows an attacker to bypass signature verification.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le | — |
Threats
Impact
Important
A flaw was found in SVGO, an SVG (Scalable Vector Graphics) Optimizer. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML file. The application's failure to properly guard against XML entity expansion or recursion can lead to the Node.js process consuming excessive memory and crashing.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le | — |
Workaround
|
Threats
Impact
Important
An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le | — |
Workaround
|
Threats
Impact
Important
A missing verification step has been discovered in PyJWT. PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. When a JWS token contains a crit array listing extensions that PyJWT does not understand, the library accepts the token instead of rejecting it. This violates the MUST requirement in the RFC.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le | — |
Workaround
|
Threats
Impact
Important
References
67 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Quay 3.9.20 is now available with bug fixes.",
"title": "Topic"
},
{
"category": "general",
"text": "Quay 3.9.20",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:6926",
"url": "https://access.redhat.com/errata/RHSA-2026:6926"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29074",
"url": "https://access.redhat.com/security/cve/CVE-2026-29074"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-30922",
"url": "https://access.redhat.com/security/cve/CVE-2026-30922"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32597",
"url": "https://access.redhat.com/security/cve/CVE-2026-32597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4599",
"url": "https://access.redhat.com/security/cve/CVE-2026-4599"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4600",
"url": "https://access.redhat.com/security/cve/CVE-2026-4600"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4601",
"url": "https://access.redhat.com/security/cve/CVE-2026-4601"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4602",
"url": "https://access.redhat.com/security/cve/CVE-2026-4602"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_6926.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Quay 3.9.20",
"tracking": {
"current_release_date": "2026-08-10T06:53:36+00:00",
"generator": {
"date": "2026-08-10T06:53:36+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.12"
}
},
"id": "RHSA-2026:6926",
"initial_release_date": "2026-04-07T21:36:48+00:00",
"revision_history": [
{
"date": "2026-04-07T21:36:48+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-10T06:53:36+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Quay 3.9",
"product": {
"name": "Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:quay:3.9::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Quay"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3A28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774886457"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885670"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3Af2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774887042"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885680"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1775183053"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885717"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885682"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256%3A6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1775184102"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3A87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885725"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3Aa18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1775169218"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Ac3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885670"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3Abfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885680"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885717"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885682"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3Af845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885725"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3A08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1775169218"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885670"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885680"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885717"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3Ace200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885682"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3Aef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1774885725"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3A3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1775169218"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64 as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64 as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64 as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64 as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64 as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64 as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64 as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64 as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64 as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x",
"relates_to_product_reference": "Red Hat Quay 3.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64 as a component of Red Hat Quay 3.9",
"product_id": "Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64",
"relates_to_product_reference": "Red Hat Quay 3.9"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-4599",
"cwe": {
"id": "CWE-338",
"name": "Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)"
},
"discovery_date": "2026-03-23T06:01:34.008562+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jsrsasign. An attacker can exploit an incomplete comparison vulnerability in the getRandomBigIntegerZeroToMax and getRandomBigIntegerMinToMax functions. By manipulating incorrect comparison checks, an attacker can bias the Digital Signature Algorithm (DSA) nonces during signature generation. This allows the attacker to recover the private key, leading to a critical security compromise.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jsrsasign: jsrsasign: Private key recovery via incomplete comparison checks biasing DSA nonces",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4599"
},
{
"category": "external",
"summary": "RHBZ#2450207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4599",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4599"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4599",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4599"
},
{
"category": "external",
"summary": "https://gist.github.com/Kr0emer/081681818b51605c91945126d74b4f20",
"url": "https://gist.github.com/Kr0emer/081681818b51605c91945126d74b4f20"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/commit/ee4b013478366cb16cea9a4bdfb218b6077f83b1",
"url": "https://github.com/kjur/jsrsasign/commit/ee4b013478366cb16cea9a4bdfb218b6077f83b1"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/pull/647",
"url": "https://github.com/kjur/jsrsasign/pull/647"
},
{
"category": "external",
"summary": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370939",
"url": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370939"
}
],
"release_date": "2026-03-23T05:00:12.522000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-07T21:36:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6926"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jsrsasign: jsrsasign: Private key recovery via incomplete comparison checks biasing DSA nonces"
},
{
"cve": "CVE-2026-4600",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-03-23T06:01:39.334925+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450208"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jsrsasign. An attacker can exploit improper verification of cryptographic signatures by supplying malicious domain parameters during the Digital Signature Algorithm (DSA) validation process. This allows the attacker to forge DSA signatures or X.509 certificates, which would then be accepted as legitimate, potentially leading to unauthorized access or data manipulation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jsrsasign: jsrsasign: Cryptographic signature forgery via malicious DSA domain parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "IMPORTANT. The flaw in jsrsasign allows an attacker to forge Digital Signature Algorithm (DSA) signatures or X.509 certificates by providing malicious domain parameters during validation. This could lead to unauthorized access or data manipulation in affected Red Hat products such as Migration Toolkit for Virtualization and Red Hat Quay, where jsrsasign is utilized for cryptographic signature verification.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4600"
},
{
"category": "external",
"summary": "RHBZ#2450208",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450208"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4600",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4600"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4600",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4600"
},
{
"category": "external",
"summary": "https://gist.github.com/Kr0emer/bf15ddc097176e951659a24a8e9002a7",
"url": "https://gist.github.com/Kr0emer/bf15ddc097176e951659a24a8e9002a7"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/commit/37b4c06b145c7bfd6bc2a6df5d0a12c56b15ef60",
"url": "https://github.com/kjur/jsrsasign/commit/37b4c06b145c7bfd6bc2a6df5d0a12c56b15ef60"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/pull/646",
"url": "https://github.com/kjur/jsrsasign/pull/646"
},
{
"category": "external",
"summary": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370940",
"url": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370940"
}
],
"release_date": "2026-03-23T05:00:08.475000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-07T21:36:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6926"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jsrsasign: jsrsasign: Cryptographic signature forgery via malicious DSA domain parameters"
},
{
"cve": "CVE-2026-4601",
"cwe": {
"id": "CWE-325",
"name": "Missing Cryptographic Step"
},
"discovery_date": "2026-03-23T06:01:44.014846+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450209"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jsrsasign. An attacker can exploit a missing cryptographic step in the Digital Signature Algorithm (DSA) signing process, specifically within the KJUR.crypto.DSA.signWithMessageHash function. By manipulating the signature generation to force specific values, the library emits an invalid signature without retrying. This vulnerability allows an attacker to recover the private key used for signing.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jsrsasign: jsrsasign: Private Key Recovery via Missing Cryptographic Step in DSA Signing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "IMPORTANT: A flaw in the jsrsasign library allows for private key recovery due to a missing cryptographic step in the Digital Signature Algorithm (DSA) signing process. An attacker can manipulate signature generation within the KJUR.crypto.DSA.signWithMessageHash function to force specific values, enabling the recovery of the private key. This impacts Red Hat products utilizing jsrsasign, such as Migration Toolkit for Virtualization and Red Hat Quay.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4601"
},
{
"category": "external",
"summary": "RHBZ#2450209",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450209"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4601",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4601"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4601",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4601"
},
{
"category": "external",
"summary": "https://gist.github.com/Kr0emer/93789fe6efe5519db9692d4ad1dad586",
"url": "https://gist.github.com/Kr0emer/93789fe6efe5519db9692d4ad1dad586"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/commit/0710e392ec35de697ce11e4219c988ba2b5fe0eb",
"url": "https://github.com/kjur/jsrsasign/commit/0710e392ec35de697ce11e4219c988ba2b5fe0eb"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/pull/645",
"url": "https://github.com/kjur/jsrsasign/pull/645"
},
{
"category": "external",
"summary": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370941",
"url": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370941"
}
],
"release_date": "2026-03-23T05:00:13.312000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-07T21:36:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6926"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jsrsasign: jsrsasign: Private Key Recovery via Missing Cryptographic Step in DSA Signing"
},
{
"cve": "CVE-2026-4602",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-03-23T06:01:28.729668+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450206"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jsrsasign. A remote attacker can exploit an incorrect conversion between numeric types by providing a negative exponent to the `modPow` function. This vulnerability can force the computation of incorrect modular inverses, which ultimately allows an attacker to bypass signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jsrsasign: jsrsasign: Signature verification bypass via negative exponent handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an IMPORTANT flaw. The `jsrsasign` library, as used in Red Hat products such as Migration Toolkit for Virtualization and Red Hat Quay, is vulnerable to a signature verification bypass. A remote attacker could provide a specially crafted negative exponent to the `modPow` function, leading to incorrect modular inverse computations and allowing them to bypass signature verification.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4602"
},
{
"category": "external",
"summary": "RHBZ#2450206",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450206"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4602",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4602"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4602",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4602"
},
{
"category": "external",
"summary": "https://gist.github.com/Kr0emer/7ecd2be7d17419e4677315ef3758faf5",
"url": "https://gist.github.com/Kr0emer/7ecd2be7d17419e4677315ef3758faf5"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/commit/5ea1c32bb2aa894b4bd29849839afe4f98728195",
"url": "https://github.com/kjur/jsrsasign/commit/5ea1c32bb2aa894b4bd29849839afe4f98728195"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/pull/650",
"url": "https://github.com/kjur/jsrsasign/pull/650"
},
{
"category": "external",
"summary": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15371175",
"url": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15371175"
}
],
"release_date": "2026-03-23T05:00:10.567000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-07T21:36:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6926"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jsrsasign: jsrsasign: Signature verification bypass via negative exponent handling"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-07T21:36:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6926"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-29074",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-03-06T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445132"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in SVGO, an SVG (Scalable Vector Graphics) Optimizer. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML file. The application\u0027s failure to properly guard against XML entity expansion or recursion can lead to the Node.js process consuming excessive memory and crashing.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "svgo: SVGO: Denial of Service via XML entity expansion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29074"
},
{
"category": "external",
"summary": "RHBZ#2445132",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445132"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29074",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29074"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29074",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29074"
},
{
"category": "external",
"summary": "https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673",
"url": "https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673"
}
],
"release_date": "2026-03-06T07:23:05.716000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-07T21:36:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6926"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "svgo: SVGO: Denial of Service via XML entity expansion"
},
{
"cve": "CVE-2026-30922",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-03-18T04:02:45.401296+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448553"
}
],
"notes": [
{
"category": "description",
"text": "An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-30922"
},
{
"category": "external",
"summary": "RHBZ#2448553",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448553"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-30922",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-30922"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",
"url": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r"
}
],
"release_date": "2026-03-18T02:29:45.857000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-07T21:36:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6926"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion"
},
{
"cve": "CVE-2026-32597",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-03-12T22:01:29.967713+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2447194"
}
],
"notes": [
{
"category": "description",
"text": "A missing verification step has been discovered in PyJWT. PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 \u00a74.1.11. When a JWS token contains a crit array listing extensions that PyJWT does not understand, the library accepts the token instead of rejecting it. This violates the MUST requirement in the RFC.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 \u00a74.1.11 MUST violation)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32597"
},
{
"category": "external",
"summary": "RHBZ#2447194",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447194"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32597"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f"
}
],
"release_date": "2026-03-12T21:41:50.427000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-07T21:36:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6926"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:0b50975dbe6ebd9f44296fd0f45ae0215dd07e981c511e0981f40421a4733c72_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:1d7bb186c76156359836714503ab7fecba45e29ff17d8ae7d757fcc37da15f34_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/clair-rhel8@sha256:ce200b9bb13ab522f92a6ed2dfc95f1662b1b7826e4c1ceb1027ef8e546c57ce_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:f2cd5b22de1888426f34c2ca60c7bfcf988720eb09fde54cbca446515e55d807_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8c71c78de43d3f0e93120b4daf42f617ce8fbc77029ff58b5a8f076076eab69d_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:8f15d337eba9e3469b2ac2319db147aaece3b4d5fb04d45083b75f5391e015b2_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:bfb47116542d4d23b664ad165aa6995106eb671a2a653056cc0f661c3a521882_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:74aca61c87c9fb817c58aad4f6108a5199e87a448640f2635dafc375ef4319d9_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:61cd166bb3a22d0cea774c2af0b2236a552be0e3523fe79a19d3da9965d4fd26_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:6ad93a010e132baa54cf92b0dcf2d4e58c3a16abd907672e35ec6bcba4c44036_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-builder-rhel8@sha256:81d9d54e878d5ba7d299bbd68bece124827454161f72e4682ef75a32b749b3d0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:28e36f1dc571c91e7746972337c9aa4e2bb2b5f94a9386588396b7871dde478e_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:49b501ce5d01f3a0692114e4db3fa2f581857aa398014e3b61dfb56eee91d58e_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:713258ea45b0180149adaac08ae2531be7f6829a6b4635b0f0820faa48b85943_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3e7c9f4c6f25477b7eeaf2dec796fdffc41a6048296b313acda8199a5426f1d_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-bundle@sha256:6b22a78edf7695230706c14b50d7a4d4cb0d6a6c4e34cc9f66ad2da8b8f44f1a_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:87670b0a08bda15047ce8d0e5ce71cbe21fe7029bd5c2c73fc00ba339f97cdf0_amd64",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:ef8aede1d912ed60006f05a713b43f5f7133dfc16c67ed5503bc08f9fe34020a_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-operator-rhel8@sha256:f845bc884db119eca8662f5039fd06db5b7efb14bab08d0b3bd524810149308f_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:08299d2ffb70a6b3f892ca732f97961a10a72cb4d4c123f10e81633f5c1c69ea_ppc64le",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:3f297a001a34b3e16d07d0a8d0b93ab2b09d4bc0e99f5e402a779138f67cea9f_s390x",
"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:a18b9479f4b10eaf07463b0da6660e106f2a924f92d576790187a6676930f5ed_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 \u00a74.1.11 MUST violation)"
}
]
}
RHSA-2026:7329
Vulnerability from csaf_redhat - Published: 2026-04-09 15:14 - Updated: 2026-08-10 06:53Summary
Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage
Severity
Important
Notes
Topic: A Subscription Management tool for finding and reporting Red Hat product usage
Details: Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds,
identifies, and reports environment data, or facts, such as the number of physical and virtual
systems on a network, their operating systems, and relevant configuration data stored within
them. Discovery also identifies and reports more detailed facts for some versions of key
Red Hat packages and products that it finds in the network.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in nodejs-lodash. A command injection flaw is possible through template variables.
7.2 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64 | — |
Vendor Fix
fix
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64 | — | ||
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64 | — |
Threats
Impact
Moderate
A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks.
4.0 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in the imaplib module in the Python standard library. The imaplib module does not reject control characters, such as newlines, in user-controlled input passed to IMAP commands. This issue allows an attacker to inject additional commands to be executed in the IMAP server.
7.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the poplib module in the Python standard library. The poplib module does not reject control characters, such as newlines, in user-controlled input passed to POP3 commands. This issue allows an attacker to inject additional commands to be executed in the POP3 server.
7.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the email module in the Python standard library. When serializing an email message, the BytesGenerator class fails to properly quote newline characters for email headers. This issue is exploitable when the LiteralHeader class is used as it does not respect email folding rules, allowing an attacker to inject email headers and potentially modify message recipients or the email body, and spoof sender information.
7.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is processed, the decompression routine may enter a state where internal logic prevents forward progress. This condition results in an infinite loop that continuously consumes CPU resources. Because the archive passes checksum validation and appears structurally valid, affected applications cannot detect the issue before processing. This can allow attackers to cause persistent denial-of-service conditions in services that automatically process archives.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Python. The `webbrowser.open()` API, used to launch web browsers, does not properly sanitize input. This allows a remote attacker to craft a malicious URL containing leading dashes. When such a URL is opened, certain web browsers may interpret these dashes as command-line options, which could lead to unexpected behavior, information disclosure, or potentially arbitrary code execution, impacting the integrity of the system.
7.1 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64 | — |
Vendor Fix
fix
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64 | — | ||
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64 | — |
Threats
Impact
Important
References
73 references
Acknowledgments
Elhanan Haenel
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "A Subscription Management tool for finding and reporting Red Hat product usage",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds,\nidentifies, and reports environment data, or facts, such as the number of physical and virtual\nsystems on a network, their operating systems, and relevant configuration data stored within\nthem. Discovery also identifies and reports more detailed facts for some versions of key\nRed Hat packages and products that it finds in the network.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:7329",
"url": "https://access.redhat.com/errata/RHSA-2026:7329"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2021-23337",
"url": "https://access.redhat.com/security/cve/CVE-2021-23337"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-14831",
"url": "https://access.redhat.com/security/cve/CVE-2025-14831"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-15366",
"url": "https://access.redhat.com/security/cve/CVE-2025-15366"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-15367",
"url": "https://access.redhat.com/security/cve/CVE-2025-15367"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-9820",
"url": "https://access.redhat.com/security/cve/CVE-2025-9820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-1299",
"url": "https://access.redhat.com/security/cve/CVE-2026-1299"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4111",
"url": "https://access.redhat.com/security/cve/CVE-2026-4111"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4519",
"url": "https://access.redhat.com/security/cve/CVE-2026-4519"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/subscription_central/1-latest/#Discovery",
"url": "https://docs.redhat.com/en/documentation/subscription_central/1-latest/#Discovery"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7329.json"
}
],
"title": "Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage",
"tracking": {
"current_release_date": "2026-08-10T06:53:37+00:00",
"generator": {
"date": "2026-08-10T06:53:37+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.12"
}
},
"id": "RHSA-2026:7329",
"initial_release_date": "2026-04-09T15:14:31+00:00",
"revision_history": [
{
"date": "2026-04-09T15:14:31+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-10T06:53:37+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Discovery 2",
"product": {
"name": "Red Hat Discovery 2",
"product_id": "Red Hat Discovery 2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:discovery:2::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Discovery"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64",
"product": {
"name": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64",
"product_id": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64",
"product_identification_helper": {
"purl": "pkg:oci/discovery-server-rhel9@sha256%3Aa3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde?arch=amd64\u0026repository_url=registry.redhat.io/discovery\u0026tag=1775668717"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"product": {
"name": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"product_id": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/discovery-ui-rhel9@sha256%3A062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb?arch=amd64\u0026repository_url=registry.redhat.io/discovery\u0026tag=1775675922"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"product": {
"name": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"product_id": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/discovery-server-rhel9@sha256%3A040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d?arch=arm64\u0026repository_url=registry.redhat.io/discovery\u0026tag=1775668717"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64",
"product": {
"name": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64",
"product_id": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64",
"product_identification_helper": {
"purl": "pkg:oci/discovery-ui-rhel9@sha256%3A364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0?arch=arm64\u0026repository_url=registry.redhat.io/discovery\u0026tag=1775675922"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64 as a component of Red Hat Discovery 2",
"product_id": "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64"
},
"product_reference": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"relates_to_product_reference": "Red Hat Discovery 2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64 as a component of Red Hat Discovery 2",
"product_id": "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64"
},
"product_reference": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64",
"relates_to_product_reference": "Red Hat Discovery 2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64 as a component of Red Hat Discovery 2",
"product_id": "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64"
},
"product_reference": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"relates_to_product_reference": "Red Hat Discovery 2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64 as a component of Red Hat Discovery 2",
"product_id": "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64"
},
"product_reference": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64",
"relates_to_product_reference": "Red Hat Discovery 2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-23337",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2021-02-15T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1928937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in nodejs-lodash. A command injection flaw is possible through template variables.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nodejs-lodash: command injection via template",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In OpenShift ServiceMesh (OSSM) and Red Hat OpenShift Jaeger (RHOSJ) the affected containers are behind OpenShift OAuth authentication. This restricts access to the vulnerable nodejs-lodash library to authenticated users only, therefore the impact is low.\n\nWhile Red Hat Virtualization\u0027s cockpit-ovirt has a dependency on lodash it doesn\u0027t use the vulnerable template function.\n\nWhile Red Hat Quay has a dependency on lodash via restangular it doesn\u0027t use the vulnerable template function.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64"
],
"known_not_affected": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-23337"
},
{
"category": "external",
"summary": "RHBZ#1928937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1928937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-23337",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-23337"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-23337",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-23337"
},
{
"category": "external",
"summary": "https://snyk.io/vuln/SNYK-JS-LODASH-1040724",
"url": "https://snyk.io/vuln/SNYK-JS-LODASH-1040724"
}
],
"release_date": "2021-02-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T15:14:31+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7329"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nodejs-lodash: command injection via template"
},
{
"cve": "CVE-2025-9820",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"discovery_date": "2025-09-02T10:00:18.839000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2392528"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gnutls: Stack-based Buffer Overflow in gnutls_pkcs11_token_init() Function",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Low, since exploitation requires local access or a malicious PKCS#11 token. While the impact is limited to denial of service or potential code execution in constrained scenarios, the vulnerability stems from a lack of proper bounds checking during token label handling in GnuTLS. Users should treat this as a security concern in environments where untrusted tokens may be introduced.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-9820"
},
{
"category": "external",
"summary": "RHBZ#2392528",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2392528"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-9820",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-9820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-9820"
},
{
"category": "external",
"summary": "https://gitlab.com/gnutls/gnutls/-/commit/1d56f96f6ab5034d677136b9d50b5a75dff0faf5",
"url": "https://gitlab.com/gnutls/gnutls/-/commit/1d56f96f6ab5034d677136b9d50b5a75dff0faf5"
},
{
"category": "external",
"summary": "https://gitlab.com/gnutls/gnutls/-/issues/1732",
"url": "https://gitlab.com/gnutls/gnutls/-/issues/1732"
},
{
"category": "external",
"summary": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2025-11-18",
"url": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2025-11-18"
}
],
"release_date": "2025-11-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T15:14:31+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7329"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Applying the upstream patch or vendor-supplied security update is the recommended resolution.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 4.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "gnutls: Stack-based Buffer Overflow in gnutls_pkcs11_token_init() Function"
},
{
"cve": "CVE-2025-14831",
"cwe": {
"id": "CWE-407",
"name": "Inefficient Algorithmic Complexity"
},
"discovery_date": "2025-12-17T14:48:30.222000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2423177"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Moderate for Red Hat. GnuTLS is susceptible to a denial of service attack due to excessive CPU and memory consumption. This occurs when processing specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs) during certificate verification.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-14831"
},
{
"category": "external",
"summary": "RHBZ#2423177",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2423177"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-14831",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14831"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-14831",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14831"
},
{
"category": "external",
"summary": "https://gitlab.com/gnutls/gnutls/-/issues/1773",
"url": "https://gitlab.com/gnutls/gnutls/-/issues/1773"
}
],
"release_date": "2026-02-09T14:26:34.939000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T15:14:31+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7329"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification"
},
{
"cve": "CVE-2025-15366",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2026-01-20T22:01:33.257688+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2431368"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the imaplib module in the Python standard library. The imaplib module does not reject control characters, such as newlines, in user-controlled input passed to IMAP commands. This issue allows an attacker to inject additional commands to be executed in the IMAP server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cpython: IMAP command injection in user-controlled commands",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to have the privileges required to send malicious input to an application that sends IMAP commands to a server. Additionally, this flaw can allow attackers to manipulate the state of the mailbox (e.g., delete emails, move folders, flag messages) and to potentially read metadata or specific email content, but it does not allow arbitrary code execution or OS command injection. Due to these reasons, this issue has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-15366"
},
{
"category": "external",
"summary": "RHBZ#2431368",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431368"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-15366",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15366"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-15366",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15366"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/issues/143921",
"url": "https://github.com/python/cpython/issues/143921"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/pull/143922",
"url": "https://github.com/python/cpython/pull/143922"
},
{
"category": "external",
"summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/DD7C7JZJYTBXMDOWKCEIEBJLBRU64OMR/",
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/DD7C7JZJYTBXMDOWKCEIEBJLBRU64OMR/"
}
],
"release_date": "2026-01-20T21:40:24.938000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T15:14:31+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7329"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, ensure that no data passed to the imaplib module contains newline or carriage return characters.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "cpython: IMAP command injection in user-controlled commands"
},
{
"cve": "CVE-2025-15367",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2026-01-20T22:02:09.399038+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2431373"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the poplib module in the Python standard library. The poplib module does not reject control characters, such as newlines, in user-controlled input passed to POP3 commands. This issue allows an attacker to inject additional commands to be executed in the POP3 server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cpython: POP3 command injection in user-controlled commands",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to have the privileges required to send malicious input to an application that sends POP3 commands to a server. Additionally, this flaw can allow attackers to manipulate the state of the mailbox (e.g., delete emails) and to potentially read metadata or specific email content, but it does not allow arbitrary code execution or OS command injection. Due to these reasons, this issue has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-15367"
},
{
"category": "external",
"summary": "RHBZ#2431373",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431373"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-15367",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15367"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-15367",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15367"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/issues/143923",
"url": "https://github.com/python/cpython/issues/143923"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/pull/143924",
"url": "https://github.com/python/cpython/pull/143924"
},
{
"category": "external",
"summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/CBFBOWVGGUJFSGITQCCBZS4GEYYZ7ZNE/",
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/CBFBOWVGGUJFSGITQCCBZS4GEYYZ7ZNE/"
}
],
"release_date": "2026-01-20T21:47:09.885000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T15:14:31+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7329"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, ensure that no data passed to the poplib module contains newline or carriage return characters.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "cpython: POP3 command injection in user-controlled commands"
},
{
"cve": "CVE-2026-1299",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-01-23T17:02:57.343486+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2432437"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the email module in the Python standard library. When serializing an email message, the BytesGenerator class fails to properly quote newline characters for email headers. This issue is exploitable when the LiteralHeader class is used as it does not respect email folding rules, allowing an attacker to inject email headers and potentially modify message recipients or the email body, and spoof sender information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cpython: email header injection due to unquoted newlines",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue can only be exploitable by Python applications using the LiteralHeader class to write email headers, as it does not respect email folding rules. Additionally, this issue allows attackers to modify message recipients or the email body and spoof sender identity but it does not cause memory corruption or arbitrary code execution. Due to these reasons, this vulnerability has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-1299"
},
{
"category": "external",
"summary": "RHBZ#2432437",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2432437"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-1299",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-1299"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-1299",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1299"
},
{
"category": "external",
"summary": "https://cve.org/CVERecord?id=CVE-2024-6923",
"url": "https://cve.org/CVERecord?id=CVE-2024-6923"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/commit/052e55e7d44718fe46cbba0ca995cb8fcc359413",
"url": "https://github.com/python/cpython/commit/052e55e7d44718fe46cbba0ca995cb8fcc359413"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/issues/144125",
"url": "https://github.com/python/cpython/issues/144125"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/pull/144126",
"url": "https://github.com/python/cpython/pull/144126"
},
{
"category": "external",
"summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/6ZZULGALJTITEAGEXLDJE2C6FORDXPBT/",
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/6ZZULGALJTITEAGEXLDJE2C6FORDXPBT/"
}
],
"release_date": "2026-01-23T16:27:13.346000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T15:14:31+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7329"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications accepting user-supplied data for email headers should sanitize the input by stripping or rejecting any strings containing carriage return or line feed characters, \u0027\\r\u0027 or \u0027\\n\u0027, respectively, preventing malicious sequences that could lead to header manipulation.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "cpython: email header injection due to unquoted newlines"
},
{
"acknowledgments": [
{
"names": [
"Elhanan Haenel"
]
}
],
"cve": "CVE-2026-4111",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-03-11T11:18:51.609000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2446453"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is processed, the decompression routine may enter a state where internal logic prevents forward progress. This condition results in an infinite loop that continuously consumes CPU resources. Because the archive passes checksum validation and appears structurally valid, affected applications cannot detect the issue before processing. This can allow attackers to cause persistent denial-of-service conditions in services that automatically process archives.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libarchive: Infinite Loop Denial of Service in RAR5 Decompression via archive_read_data() in libarchive",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Red Hat Product Security team would likely assess the severity of this vulnerability as High because it allows remote attackers to cause a persistent denial-of-service condition using a small crafted archive file. Successful exploitation requires no authentication, no special configuration, and no user interaction in environments that automatically process uploaded archives. By repeatedly submitting malicious archives, an attacker can exhaust CPU resources or worker threads in services such as file upload systems, CI/CD pipelines, mail scanners, and content indexing services that rely on libarchive for archive extraction.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4111"
},
{
"category": "external",
"summary": "RHBZ#2446453",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446453"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4111",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4111"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4111",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4111"
},
{
"category": "external",
"summary": "https://github.com/libarchive/libarchive/pull/2877",
"url": "https://github.com/libarchive/libarchive/pull/2877"
}
],
"release_date": "2026-03-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T15:14:31+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7329"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libarchive: Infinite Loop Denial of Service in RAR5 Decompression via archive_read_data() in libarchive"
},
{
"cve": "CVE-2026-4519",
"cwe": {
"id": "CWE-88",
"name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
},
"discovery_date": "2026-03-20T16:02:13.494105+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449649"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Python. The `webbrowser.open()` API, used to launch web browsers, does not properly sanitize input. This allows a remote attacker to craft a malicious URL containing leading dashes. When such a URL is opened, certain web browsers may interpret these dashes as command-line options, which could lead to unexpected behavior, information disclosure, or potentially arbitrary code execution, impacting the integrity of the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Python: Command-line option injection in webbrowser.open() via crafted URLs",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64"
],
"known_not_affected": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4519"
},
{
"category": "external",
"summary": "RHBZ#2449649",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449649"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4519",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4519"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4519",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4519"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/issues/143930",
"url": "https://github.com/python/cpython/issues/143930"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/pull/143931",
"url": "https://github.com/python/cpython/pull/143931"
},
{
"category": "external",
"summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/AY5NDSS433JK56Q7Q5IS7B37QFZVVOUS/",
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/AY5NDSS433JK56Q7Q5IS7B37QFZVVOUS/"
}
],
"release_date": "2026-03-20T15:08:32.576000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T15:14:31+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7329"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python: Python: Command-line option injection in webbrowser.open() via crafted URLs"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64"
],
"known_not_affected": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T15:14:31+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7329"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:a3c9eb11995a4e0b695a1fc54bb99a4e8a7fe69db01545f4f641cb69b6c80dde_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:364ac04db0b76b761a12fe6e58c2b165a518e1035015f74dd661af2fd64636e0_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
}
]
}
RHSA-2026:8218
Vulnerability from csaf_redhat - Published: 2026-04-15 01:45 - Updated: 2026-08-10 23:44Summary
Red Hat Security Advisory: multicluster engine for Kubernetes v2.8.5 security update
Severity
Important
Notes
Topic: The multicluster engine for Kubernetes 2.8 General Availability release images,
which add new features and enhancements, bug fixes, and updated container images.
Details: The multicluster engine for Kubernetes v2.8 images
The multicluster engine for Kubernetes provides the foundational components
that are necessary for the centralized management of multiple
Kubernetes-based clusters across data centers, public clouds, and private
clouds.
You can use the engine to create new Red Hat OpenShift Container Platform
clusters or to bring existing Kubernetes-based clusters under management by
importing them. After the clusters are managed, you can use the APIs that
are provided by the engine to distribute configuration based on placement
policy.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in database/sql. Concurrent queries can produce unexpected results when a query is cancelled during a Scan method call on returned Rows, creating a race condition. This vulnerability allows an attacker who can initiate and cancel queries to trigger this condition, possibly leading to inconsistent data being returned to the application.
7.0 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64 | — |
Vendor Fix
fix
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x | — |
Threats
Impact
Moderate
A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go program to try to allocate a large amount of memory, causing an out-of-memory condition and resulting in a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
84 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64 | — |
Vendor Fix
fix
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x | — |
Threats
Impact
Important
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64 | — |
Vendor Fix
fix
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x | — |
Threats
Impact
Moderate
A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect.
8.0 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x | — |
Workaround
|
Threats
Impact
Important
A denial of service flaw has been discovered in the Axios npm package. the mergeConfig function in axios crashes with a TypeError when processing configuration objects containing __proto__ as an own property. An attacker can trigger this by providing a malicious configuration object created via JSON.parse(), causing complete denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le | — |
Vendor Fix
fix
|
Known not affected
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x | — |
Threats
Impact
Important
References
77 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The multicluster engine for Kubernetes 2.8 General Availability release images,\nwhich add new features and enhancements, bug fixes, and updated container images.",
"title": "Topic"
},
{
"category": "general",
"text": "The multicluster engine for Kubernetes v2.8 images\n\nThe multicluster engine for Kubernetes provides the foundational components\nthat are necessary for the centralized management of multiple\nKubernetes-based clusters across data centers, public clouds, and private\nclouds.\n\nYou can use the engine to create new Red Hat OpenShift Container Platform\nclusters or to bring existing Kubernetes-based clusters under management by\nimporting them. After the clusters are managed, you can use the APIs that\nare provided by the engine to distribute configuration based on placement\npolicy.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:8218",
"url": "https://access.redhat.com/errata/RHSA-2026:8218"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-13465",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-47907",
"url": "https://access.redhat.com/security/cve/CVE-2025-47907"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58183",
"url": "https://access.redhat.com/security/cve/CVE-2025-58183"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61726",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61729",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-22029",
"url": "https://access.redhat.com/security/cve/CVE-2026-22029"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25639",
"url": "https://access.redhat.com/security/cve/CVE-2026-25639"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_8218.json"
}
],
"title": "Red Hat Security Advisory: multicluster engine for Kubernetes v2.8.5 security update",
"tracking": {
"current_release_date": "2026-08-10T23:44:38+00:00",
"generator": {
"date": "2026-08-10T23:44:38+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHSA-2026:8218",
"initial_release_date": "2026-04-15T01:45:31+00:00",
"revision_history": [
{
"date": "2026-04-15T01:45:31+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-10T23:44:38+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "multicluster engine for Kubernetes 2.8",
"product": {
"name": "multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:multicluster_engine:2.8::el9"
}
}
}
],
"category": "product_family",
"name": "multicluster engine for Kubernetes"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64",
"product_id": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64",
"product_identification_helper": {
"purl": "pkg:oci/addon-manager-rhel9@sha256%3A8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775638648"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64",
"product_id": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3Ab9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774990481"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64",
"product_id": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/backplane-rhel9-operator@sha256%3Abaedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775518980"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-agent-rhel9@sha256%3Ac18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775346065"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-kubevirt-rhel9@sha256%3A384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774913637"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-curator-controller-rhel9@sha256%3A5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774913604"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-image-set-controller-rhel9@sha256%3A1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774913615"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-addon-rhel9@sha256%3A61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774913693"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-rhel9@sha256%3Ab0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775441905"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64",
"product_id": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clusterclaims-controller-rhel9@sha256%3A1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774918593"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64",
"product_id": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clusterlifecycle-state-metrics-rhel9@sha256%3Ae9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774925022"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64",
"product_id": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64",
"product_identification_helper": {
"purl": "pkg:oci/console-mce-rhel9@sha256%3A896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775116156"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64",
"product_id": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64",
"product_identification_helper": {
"purl": "pkg:oci/discovery-rhel9@sha256%3A850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774913711"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64",
"product_id": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hive-rhel9@sha256%3Ad2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775259683"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-addon-rhel9-operator@sha256%3Ad2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774913832"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-cli-rhel9@sha256%3Ac3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774913767"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-rhel9-operator@sha256%3A9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774913854"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64",
"product_id": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/image-based-install-rhel9@sha256%3A8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774986989"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64",
"product_id": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kube-rbac-proxy-mce-rhel9@sha256%3Abb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774913844"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64",
"product_id": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/managed-serviceaccount-rhel9@sha256%3A9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775441911"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64",
"product_id": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/managedcluster-import-controller-rhel9@sha256%3A3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775198475"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64",
"product_id": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicloud-manager-rhel9@sha256%3A31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775441898"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64",
"product_id": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64",
"product_identification_helper": {
"purl": "pkg:oci/placement-rhel9@sha256%3A32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775638675"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64",
"product_id": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/provider-credential-controller-rhel9@sha256%3Afd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775231857"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64",
"product_id": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64",
"product_identification_helper": {
"purl": "pkg:oci/registration-rhel9@sha256%3A548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775638726"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64",
"product_id": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64",
"product_identification_helper": {
"purl": "pkg:oci/registration-operator-rhel9@sha256%3A2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775638748"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64",
"product_id": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/work-rhel9@sha256%3A08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775638726"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64",
"product_id": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/addon-manager-rhel9@sha256%3Ab0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775638648"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64",
"product_id": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3A45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774990481"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64",
"product_id": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64",
"product_identification_helper": {
"purl": "pkg:oci/backplane-rhel9-operator@sha256%3A6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775518980"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-agent-rhel9@sha256%3Aa368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775346065"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-kubevirt-rhel9@sha256%3A98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774913637"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-curator-controller-rhel9@sha256%3A89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774913604"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-image-set-controller-rhel9@sha256%3Aad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774913615"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-addon-rhel9@sha256%3A3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774913693"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-rhel9@sha256%3Aac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775441905"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64",
"product_id": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/clusterclaims-controller-rhel9@sha256%3Ab496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774918593"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64",
"product_id": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/clusterlifecycle-state-metrics-rhel9@sha256%3A36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774925022"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64",
"product_id": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64",
"product_identification_helper": {
"purl": "pkg:oci/console-mce-rhel9@sha256%3A7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775116156"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64",
"product_id": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64",
"product_identification_helper": {
"purl": "pkg:oci/discovery-rhel9@sha256%3Ad7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774913711"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64",
"product_id": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64",
"product_identification_helper": {
"purl": "pkg:oci/hive-rhel9@sha256%3Ac02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775259683"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-addon-rhel9-operator@sha256%3Afff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774913832"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-cli-rhel9@sha256%3A4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774913767"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-rhel9-operator@sha256%3A1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774913854"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64",
"product_id": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/image-based-install-rhel9@sha256%3Ae227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774986989"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64",
"product_id": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kube-rbac-proxy-mce-rhel9@sha256%3A62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774913844"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64",
"product_id": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64",
"product_identification_helper": {
"purl": "pkg:oci/managed-serviceaccount-rhel9@sha256%3Af1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775441911"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64",
"product_id": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/managedcluster-import-controller-rhel9@sha256%3A11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775198475"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64",
"product_id": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicloud-manager-rhel9@sha256%3A5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775441898"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64",
"product_id": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64",
"product_identification_helper": {
"purl": "pkg:oci/placement-rhel9@sha256%3Ac0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775638675"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64",
"product_id": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/provider-credential-controller-rhel9@sha256%3A24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775231857"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64",
"product_id": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/registration-rhel9@sha256%3A126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775638726"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64",
"product_id": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/registration-operator-rhel9@sha256%3Ab98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775638748"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64",
"product_id": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64",
"product_identification_helper": {
"purl": "pkg:oci/work-rhel9@sha256%3A4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775638726"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/addon-manager-rhel9@sha256%3Af6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775638648"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3A9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774990481"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/backplane-rhel9-operator@sha256%3A5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775518980"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-agent-rhel9@sha256%3A797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775346065"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-kubevirt-rhel9@sha256%3A6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774913637"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-curator-controller-rhel9@sha256%3A928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774913604"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-image-set-controller-rhel9@sha256%3A6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774913615"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-addon-rhel9@sha256%3Ad69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774913693"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-rhel9@sha256%3Ad47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775441905"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clusterclaims-controller-rhel9@sha256%3A4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774918593"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clusterlifecycle-state-metrics-rhel9@sha256%3Aa8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774925022"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/console-mce-rhel9@sha256%3Aa520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775116156"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/discovery-rhel9@sha256%3Ac9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774913711"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/hive-rhel9@sha256%3Ac95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775259683"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-addon-rhel9-operator@sha256%3Afb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774913832"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-cli-rhel9@sha256%3A913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774913767"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-rhel9-operator@sha256%3Ab078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774913854"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/image-based-install-rhel9@sha256%3A9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774986989"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kube-rbac-proxy-mce-rhel9@sha256%3Ad81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774913844"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/managed-serviceaccount-rhel9@sha256%3A758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775441911"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/managedcluster-import-controller-rhel9@sha256%3A7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775198475"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicloud-manager-rhel9@sha256%3A5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775441898"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/placement-rhel9@sha256%3A05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775638675"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/provider-credential-controller-rhel9@sha256%3A4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775231857"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/registration-rhel9@sha256%3A772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775638726"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/registration-operator-rhel9@sha256%3Aeeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775638748"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/work-rhel9@sha256%3A174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775638726"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x",
"product_id": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/addon-manager-rhel9@sha256%3Ae7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775638648"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x",
"product_id": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3A97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774990481"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x",
"product_id": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/backplane-rhel9-operator@sha256%3A553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775518980"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-agent-rhel9@sha256%3Ad4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775346065"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-kubevirt-rhel9@sha256%3Ae26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774913637"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-curator-controller-rhel9@sha256%3Aad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774913604"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-image-set-controller-rhel9@sha256%3Af4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774913615"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-addon-rhel9@sha256%3A74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774913693"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-rhel9@sha256%3A79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775441905"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x",
"product_id": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clusterclaims-controller-rhel9@sha256%3Addda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774918593"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x",
"product_id": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clusterlifecycle-state-metrics-rhel9@sha256%3A575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774925022"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x",
"product_id": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/console-mce-rhel9@sha256%3A4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775116156"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x",
"product_id": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x",
"product_identification_helper": {
"purl": "pkg:oci/discovery-rhel9@sha256%3A4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774913711"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x",
"product_id": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x",
"product_identification_helper": {
"purl": "pkg:oci/hive-rhel9@sha256%3A6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775259683"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-addon-rhel9-operator@sha256%3A55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774913832"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-cli-rhel9@sha256%3Ad57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774913767"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-rhel9-operator@sha256%3A17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774913854"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x",
"product_id": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x",
"product_identification_helper": {
"purl": "pkg:oci/image-based-install-rhel9@sha256%3A9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774986989"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x",
"product_id": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kube-rbac-proxy-mce-rhel9@sha256%3Adad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1774913844"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x",
"product_id": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/managed-serviceaccount-rhel9@sha256%3A4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775441911"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x",
"product_id": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x",
"product_identification_helper": {
"purl": "pkg:oci/managedcluster-import-controller-rhel9@sha256%3A132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775198475"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x",
"product_id": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicloud-manager-rhel9@sha256%3A1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775441898"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x",
"product_id": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x",
"product_identification_helper": {
"purl": "pkg:oci/placement-rhel9@sha256%3A18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775638675"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x",
"product_id": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x",
"product_identification_helper": {
"purl": "pkg:oci/provider-credential-controller-rhel9@sha256%3A659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775231857"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x",
"product_id": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/registration-rhel9@sha256%3Ad6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775638726"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x",
"product_id": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/registration-operator-rhel9@sha256%3Ae7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775638748"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x",
"product_id": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x",
"product_identification_helper": {
"purl": "pkg:oci/work-rhel9@sha256%3Ade69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine\u0026tag=1775638726"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64 as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x as a component of multicluster engine for Kubernetes 2.8",
"product_id": "multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-13465",
"cwe": {
"id": "CWE-1321",
"name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)"
},
"discovery_date": "2026-01-21T20:01:28.774829+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2431740"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: prototype pollution in _.unset and _.omit functions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is only exploitable by applications using the _.unset and _.omit functions on an object and allowing user input to determine the path of the property to be removed. This issue only allows the deletion of properties but does not allow overwriting their behavior, limiting the impact to a denial of service. Due to this reason, this vulnerability has been rated with an important severity.\n\nIn Grafana, JavaScript code runs only in the browser, while the server side is all Golang. Therefore, the worst-case scenario is a loss of functionality in the client application inside the browser. To reflect this, the CVSS availability metric and the severity of the Grafana and the Grafana-PCP component have been updated to low and moderate, respectively.\n\nThe lodash dependency is bundled and used by the pcs-web-ui component of the PCS package. In Red Hat Enterprise Linux 8.10, the pcs-web-ui component is no longer included in the PCS package. As a result, RHEL 8.10 does not ship the vulnerable lodash component within PCS and is therefore not-affected by this CVE.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "RHBZ#2431740",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431740"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13465",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13465"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg",
"url": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg"
}
],
"release_date": "2026-01-21T19:05:28.846000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-15T01:45:31+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8218"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement strict input validation before passing any property paths to the _.unset and _.omit functions to block attempts to access the prototype chain. Ensure that strings like __proto__, constructor and prototype are blocked, for example.",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: prototype pollution in _.unset and _.omit functions"
},
{
"cve": "CVE-2025-47907",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"discovery_date": "2025-08-07T16:01:06.247481+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2387083"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in database/sql. Concurrent queries can produce unexpected results when a query is cancelled during a Scan method call on returned Rows, creating a race condition. This vulnerability allows an attacker who can initiate and cancel queries to trigger this condition, possibly leading to inconsistent data being returned to the application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "database/sql: Postgres Scan Race Condition",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability marked as Moderate severity issues rather than Important. The os/exec LookPath flaw requires a misconfigured PATH to be exploitable, and the database/sql race condition primarily impacts applications that cancel queries while running multiple queries concurrently. Both can cause unexpected behavior, but the exploitation scope is limited and unlikely to result in direct compromise in most typical deployments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-47907"
},
{
"category": "external",
"summary": "RHBZ#2387083",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2387083"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-47907",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47907"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-47907",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47907"
},
{
"category": "external",
"summary": "https://go.dev/cl/693735",
"url": "https://go.dev/cl/693735"
},
{
"category": "external",
"summary": "https://go.dev/issue/74831",
"url": "https://go.dev/issue/74831"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/x5MKroML2yM",
"url": "https://groups.google.com/g/golang-announce/c/x5MKroML2yM"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-3849",
"url": "https://pkg.go.dev/vuln/GO-2025-3849"
}
],
"release_date": "2025-08-07T15:25:30.704000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-15T01:45:31+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8218"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "database/sql: Postgres Scan Race Condition"
},
{
"cve": "CVE-2025-58183",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-10-29T23:01:50.573951+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2407258"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go program to try to allocate a large amount of memory, causing an out-of-memory condition and resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to be able to process a specially crafted GNU tar pax 1.0 archive with the application using the archive/tar package. Additionally, this issue can cause the Go application to allocate a large amount of memory, eventually leading to an out-of-memory condition and resulting in a denial of service with no other security impact. Due to these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58183"
},
{
"category": "external",
"summary": "RHBZ#2407258",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2407258"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58183",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58183"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58183",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58183"
},
{
"category": "external",
"summary": "https://go.dev/cl/709861",
"url": "https://go.dev/cl/709861"
},
{
"category": "external",
"summary": "https://go.dev/issue/75677",
"url": "https://go.dev/issue/75677"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI",
"url": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4014",
"url": "https://pkg.go.dev/vuln/GO-2025-4014"
}
],
"release_date": "2025-10-29T22:10:14.376000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-15T01:45:31+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8218"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map"
},
{
"cve": "CVE-2025-61726",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:42.791305+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "RHBZ#2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://go.dev/cl/736712",
"url": "https://go.dev/cl/736712"
},
{
"category": "external",
"summary": "https://go.dev/issue/77101",
"url": "https://go.dev/issue/77101"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4341",
"url": "https://pkg.go.dev/vuln/GO-2026-4341"
}
],
"release_date": "2026-01-28T19:30:31.215000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-15T01:45:31+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8218"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-15T01:45:31+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8218"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-15T01:45:31+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8218"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2026-22029",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-01-10T04:01:03.694749+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2428412"
}
],
"notes": [
{
"category": "description",
"text": "A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-22029"
},
{
"category": "external",
"summary": "RHBZ#2428412",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2428412"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-22029",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22029"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-22029",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22029"
},
{
"category": "external",
"summary": "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx",
"url": "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx"
}
],
"release_date": "2026-01-10T02:42:32.736000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-15T01:45:31+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8218"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects"
},
{
"cve": "CVE-2026-25639",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"discovery_date": "2026-02-09T21:00:49.280114+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2438237"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw has been discovered in the Axios npm package. the mergeConfig function in axios crashes with a TypeError when processing configuration objects containing __proto__ as an own property. An attacker can trigger this by providing a malicious configuration object created via JSON.parse(), causing complete denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios affected by Denial of Service via __proto__ Key in mergeConfig",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25639"
},
{
"category": "external",
"summary": "RHBZ#2438237",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2438237"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25639",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25639"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25639",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25639"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/28c721588c7a77e7503d0a434e016f852c597b57",
"url": "https://github.com/axios/axios/commit/28c721588c7a77e7503d0a434e016f852c597b57"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.13.5",
"url": "https://github.com/axios/axios/releases/tag/v1.13.5"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-43fc-jf86-j433",
"url": "https://github.com/axios/axios/security/advisories/GHSA-43fc-jf86-j433"
}
],
"release_date": "2026-02-09T20:11:22.374000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-15T01:45:31+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8218"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios affected by Denial of Service via __proto__ Key in mergeConfig"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-15T01:45:31+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:8218"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8726da36d26d647248ec7d0a38c37760a86b909d5e32535cd79573ba73418e65_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b0c5ea5c0c5cb1ffb39a18da2d69714adeab262037769c8bb61a08165a9b249d_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:e7d9e3b4d184144fe0048620e63f8605ba70ff6ba6b5f91d911facbe2cc43dc9_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:f6bf8d199b9346b82197c5911b00d4a7a6cb9b7c84d5b0c3d5052aee07e23f53_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:553edf965192cf55bc245e8a3bbf3a27545d62d03d311acc24062a2554a2e85f_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d7b59bfe6851def3f341bfad75ef2e6fcea8cc77ea3268167519f8d3bae5c33_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6abe1731496380fe823109b6acc4415130e65d51722e27da134eb79f0a3f4f18_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:baedd408112b3fbd00b03ff80f5bf1afc390250aa5aa07ed4e83aadc5ea47e4c_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:797e7b8b8dd7e769d8af43c94076e17b0e9dad73121bafd44368b95c0e5b21d2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a368438d68a76db54dc21edee2a9dfe0356201730e5edaf3efe2e5d35cf4812b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:c18392461e4b948a1e269a91750048df39b06512e0c12b35ca2bfcbd7cbfc6bc_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d4e3c622c9e9e9fd7715efe0675082b313811c3ad4be4d483b0bd6df4137b98d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:384d7665ebd94ba2c06dc5039f63b2e5d9a7562c2c55dc5018a4605cb72f8159_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6efea98320dbf13ef6b7bd24cc45b5cddc2f9368b71556770abd846f27b0b989_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:98fade294c1ff0688c36878f62275e82a2b19696c2a01edd5fa78acca4a99104_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:e26c917cc85445632f6e971636a98d5e7a0bbc3c1fd3dc647385c3ab4abf13f0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:5e4dde4a4e91f67ad09ea3fe2b685731570fbbdab3bed1729f727ed50728f0aa_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:89623857fddc1cb6a4c00f7927adeebe64a9035b104bee39c7c4e5ca73d4161a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:928850a95a992b3cad76163aa68c17971cd1c4d2eb4cc2aa7495fa43a03c7f9c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ad1094291b455efbcb67c99059f25aa0c324a8ea57f1b4917995ca8daefe602d_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:1903cc91969e1e9a9d90676abbaf6a13af2644ab4678c4354cc4c436c7d73320_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6eaae5bbd36db4137748ce56b9bdb89440d46cf33e44deb7886742151a926233_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ad396a22c7dfc18d3755b5226322b02cf53e9d889d8c4c0fd9f3fc18640d5229_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f4e156751bf139839b078a9ed28ac273209573d752850d2191cf523168ecef3c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:3aa5791c30722dc9a41b11af0e6165b16e1fbb90f9223402f15ccd1b3ab87bcb_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:61aca1200e3f76ad5608ec2fea60192281cfd8dc883ca95a952d4634b362b28d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:74d46cd69f0ea430d4f64bb7eb2c7801552fd75180bd174afba4280202487a9b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d69c9156ba667438e59cb8c71a905fd92a26e830629a5c20223d70173a64a95b_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:79bbb4f57c6b596c4926a8bc3a8fb9f885f05251a6c93a903622ea18ed77f224_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:ac44ed8760e5bf9d701b3cf4296805d1df6f6b9cb57b3e0a7557239de1a542b7_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b0c796e0d0eea701ebcb55c646042a020d71e18595e260644884596b04dd1def_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d47167421192458b70433c97afbee742ede2a650c7af0ce54b126fa251cc1ea7_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:1ab0fe650316e0640421fbc361eae235c4a0175c7467acd5e8ad414a8fd1fc75_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4355c558ed342b1e96f4b23c53b229d22ef4ee48378980eb7359d7864e15fe6d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b496e4274643266a37d7ba7134f71e3aa262df65e4c04b9148ee9d7a67da669a_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ddda8b74fb8cbde98a90fc89c62608dce08a022c0e63ae90a1a0b52123da1c2c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:36b56d6b9609512532fdae217b892ebc40ce774161e6f90176b052cf7ee686a3_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:575cb613c7cc81507a3e6235e30b0ffbb34f145e2bb6b97632d68ed5e73fd090_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:a8d65fb8b81be9613bc732f696ef245aad46a23335de455d258598dd86c19f8d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e9d6ed28fbbe6a3aeb2050c6e8fc3f8a5b6cc7546ee996006e92031294f83d2f_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:4943997b1fed0e8fada897f8296fafd2ec82c69d51f0779b0f1591c9ce2dcc2a_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7f98a0535715ba9925f93f16c41fc2cfdc16ee8fb32654336f7c5a09b0e7d9dd_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:896deef9b7467a814e9e79a4366da9daf969b2c260ec30a517dfa30887e10205_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a520297678ce3bd9a01a1e64b41833535d30ba469e55f26c462af1303c0f959d_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:4100f29f8a8ba48956cc570cc2a65bc38b9fffa9b946fc3c6253bd0a54f25065_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:850c60717c0c3a8cdc7bb742721e73dbcd8928443fb6776003e3ca71fdd17982_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c9e8a0a70d60dd717a2f9c8018f1ce963ce25079476a64e8743e826e616ffb00_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:d7dd81c6f47faf4e07602dfed2229b27d8064d8180009b4bc62189030575d421_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6a25acbc7851fdb9ab19d6f3286e50db85f07064f59a604aedaff48800b06572_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c02087ae03cff78d4a3fba8887ef55d33cd00a8f2f74806368bf683fa73c0e46_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:c95f5edf4111dc9077d07c0c81df6fc238c6d048d22793f83f7be08bc673b9d3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:d2cc92420cffc159ce7f27104ba9e49745198e9e3314683209624e4a1a3f041a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:55928ce9d57439303297ac900fc0b4f95de64ee691a332a21995cf09342c1aff_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d2949213c7c3f93b0b59082ecdc69f4e05b8038a43afc216926ec43714a73346_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fb49af7cc738943c59aef8a8b860b00f5e854cc95d58a88461c30ebea0f329c3_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:fff7cebbf5360ae8830e3650f72b5c269be15b9892848f0a3408ed47abb5a5ad_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4d8f346ef3bffeed12b3c64e5ebed22f8d79397e915c0bfbbc5bf03ee809c0a0_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:913120c0fc826c2f8ed1f2cba5e71c91e2c440e50be043ab912d688b230aa0fb_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c3633df794c0803b27d8607d1391eb66af8c104712584ba326d04e4cae8627d6_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:d57138c750131113f09ce1259f5702a0d4b984fb29d5d7994c5dc4ad6aaaf39b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:1766984333b3b3d1d1614bafef596fb94351b3358e04e32d46e20752b60a0d9e_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:17c676d8e456102d877a7feee97c7164ee9f71e21763c5561bed8ac24e5dc2d0_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:9e94ed8885a79d3c7ca3a41ffba43455b410435ea0090fb5c6598eefc5156b22_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b078e01e6a3d6a04c2e364d42aa4a5be37bb2aa279ae484c524ae58293aacc3a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8edafac72bd8526384c33b749595be0986d86957b79ac7ac7ae37b435f27351e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9532ce55aa8e3553bd102a891ca6e2b6cf93f23da41c71ba184e769dd1328410_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9d146a6192bc9251ceb9443e32c708cfbb7cd542f6d9621c1dbbbdff50ede9ae_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:e227cdab2e061d70761d510b0d9c99b4dcf735d0257809c6757155ef18bb341f_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:62fd673d06de31af8b7946b6eb657c69e064dc1e8639197e689375be3a331c90_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:bb9014907e1d57647589efe637bf133e631d03ac94e1c30181eccf6ea8bddc6b_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:d81f2ab37bd8c6e5aaccd0ed2b94fbc2bf88934f3ffda8fde7add64b9f051966_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:dad80c9983167fb8fd98912c890b3a1dbcac2cbadf417c7771a3fda2f23f832c_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4be015b2648cd7f4edb2aa29521f283959db8336ce4df5497ad8465a031bd3c4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:758c0f95e9895b61a86e3ff4f4c2570f278c7af13ad3a5876d785829b746bf42_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:9082cef0cbf513a3c33309be5e83774cf92ddae6045c571f43718583da451d8d_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:f1f8475bacfa68df75fa015dfd7fb73565ed2b0b73fe8eeec26c2831862d7175_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:11e40e57f6d48e0eba7e4ed12f4ef55b84ec9f93d2534712318d259dc4fcf4a5_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:132e7098ba9e2ac1e02e04e828359073ecc322a5e9e804badb1e0e5934ff32fe_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3cdd76fda529eb46161cac023a40b1420d85cfe6ac9100986796e4f49ea5e7c2_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7805f6d13f8a8a1309c2821622706e0e81c6b0a99f18ca761f031937d67fd484_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1b8f3645dca1f463be8be4f3bbde53cfb0a28412ddc7f20eed9e39b4f7f02979_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:31b3f532cfa55e76563251f01008c9998b71ba33a4dd75c3307db32173d6ff39_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5a063e1f8a5d0ff90f7c948f332fff502fc00be8ede14bd0ef4b38ab09717c72_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:5cde57462724bc2ebd303b29d6127d2fdffcd4c4b93ea443eb6ac55290031960_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:45ef14cb6ce30aaf3780fbb5656dae822825b892e165469c0c732e613f452c94_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:9460807bdb775b166264de2b0a5eb348b144cb9a7a0b1d42190a3ce54bea8d63_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:97bb4216555694418e609366ecb47bd1c8336c1e97e76039df4949c5be4fb997_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b9bc631124b8d4f95faf4de518915fc8bd519edf11055b703ee223c0c4813b52_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:05689e767759be2e46620c752e079847fad0941193456dad22ed33111e69f44c_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:18b0f392942a743b23dc4db9ccccaf467053e70bdad97f1714d0d413f66eaf71_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:32e1fac10eb855484152f41d6a2e4b3fa6fb9c63afd10c5d546db29916f40816_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c0aeadd784317f5d0a5415bb2002ab6116f2c947c00fc8df9e2a91e907e108bf_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:24c9f0cb19b5e95ee037583eff0c5e683c98d65868f57221e36db1fe1aaad96b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:4def0b462d24131336a8f641edf6206d9eac005b61d1abd3739b549e74794ee9_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:659a041590140f69a2a0952769a53240e12d770cb7440fc0ac1af4198470e684_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:fd72d5e49c2d10e1ccb16547ee8563ad5c1c4a09960f6c3563b8f394e031c50e_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2ff4c94a03c71dc68b519db391d0b7f9787e7709df2e5d16aa837fcf522418de_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b98f70827db37e91dc99336043552d1375cd94a7bbab3c0abcfa7f7d33b3d3d6_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:e7adcd557f69ccf4893c0f40b5ccb19264a401ea98436b5072d1b7593d120bc4_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:eeaf14966d50a750a665ef6304f3ca82b50c0cfe147acf796714ddd0642d51f2_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:126b982ac1e4ca447773a3c9099691f0ad5dca0d7a4101877724421d613c459b_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:548fe802bc62d3ff20ee0b13dcd9792eb304f11d5d496562ad1c2d80b5796c67_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:772e9e4da783b4d33ff1846a6b8fc9ab7acefe76dd21eb3030c83f6352050894_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:d6622aa3381f9ac73e6f3c9764ffe357a434d021c62d20d5a95ebb586b66d87b_s390x",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:08ffacc73e8bdd40fbd4e913971eb1621a09329c85ec123e1781c08515cf3b5a_amd64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:174f055bd042d6ec4e056ef9f6bb430f0b7e68211ee56155aee1d02f6b26a53a_ppc64le",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:4248348b507e9a78095ffa9d7a2ef4ff87880f65fdfc8ae71e67018655705c53_arm64",
"multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:de69889c3af110ae6613401431a384781ece6f82bbe2933b81dedef602be9005_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
Loading…
Loading…